QuickStudy: Bluefin defines SAN management. Sun gains N1 technology at HP’s expense. 
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Comdex Future Gets Blurry 


NEWSPAPER 


Some of this year’s 
exhibitors standoffish 
on early commitment 


BY CAROL SLIWA 
LAS VEGAS 
Exactly what will happen to 
Comdex next year might be 
good fodder for this city’s 
oddsmakers, but there was 
one sure bet at the end of last 
week’s scaled-down show. 
Financially troubled Key3- 
Media Group Inc. likely won’t 
be the producer of the IT in- 
dustry’s premier trade event. 
The Los Angeles-based com- 
pany is trying to sell its assets, 
and assuming that effort is 


successful, a new owner will 
determine the show’s future. 

The uncertain status is 
causing some vendors to hold 
back from committing to next 
year’s event. 

“Nobody wants to give them 
a check if they’re going to lose 
money,” said one official at a 
hardware vendor who asked 
not to be identified. “You don’t 
want to see them spend it on 
lawyers in bankruptcy court.” 

And the declining number 
of exhibitors is already caus- 
ing some attendees to reassess 
the value of the show. 
| Eric Walker, assistant MIS 
| director at the Arkansas De- 





Al-Qaeda Poses Threat to Net 


ay heed to warning 
from bin Laden 
associate, experts say | 
BY DAN VERTON 
Intelligence and security ex- 
perts last week said new 
warnings of potential cyber- 
attacks against Western eco- 
nomic targets by al- 
Qaeda sympathizers 
should be taken seri- 
ously by government policy- 
makers and the managers of 
the targeted systems. 

In an exclusive interview 
with Computerworld on Nov. 
18, Sheikh Omar Bakri Mu- 
hammad, a London-based fun- 


damentalist Islamic cleric 
with known ties to Osama bin 


| Laden, said al-Qaeda and vari- 


ous other radical Muslim 
groups around the world are 
actively planning to use the 
Internet as a weapon in their 
“defensive” jihad, or holy war, 
against the West. 

“In a matter of time, you 
will see attacks on 
the stock market,” 
said Bakri, referring 
specifically to the exchanges 
in New York, London and 
Tokyo. “That is what al-Qaeda 
is skillful with. I would not be 
surprised if tomorrow I hear 
of a big economic collapse be- 

Al-Qaeda, page 14 





DobeeMeoteceslUaceeldacddeclalectectssbeal baal 
SBXBSIFTR *#8RRAUTORES-DIGIT 48106 


48106P0Q984PB886 
PROQUEST 
PO BOX 984 


6013 
61 


NOUV @3 081 


61-7 


ANN ARBOR MI 48106-8984 


Comdex, page 53 





Users Begin to Demand 
Software Usability Tests 


Boeing requiring vendors to follow 
new usability standard for products 


BY PATRICK THIBODEAU 
WASHINGTON 

The Boeing Co. is changing 
the way it buys software and 
is making a product’s usabili- 
ty — the ease with which end 
users can be trained on and 
operate the product — a fun- 
damental purchasing criteri- 
on. It’s a move the aerospace 
giant sees as an essential 


means of controlling IT costs. 


“We simply can’t afford to 
pay for products that cost us 
a lot of overhead anymore,” 
said Keith Butler, a technical 


| fellow at Boeing’s Phantom 


Works research and develop- 


| ment arm. When thousands 
| of end users are involved, de- 


sign flaws can cost millions of 
dollars in lost time and pro- 


| ductivity, he said. 
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What’s helping Boeing 
change its purchasing ap 
proach is the recent develop- 
ment of a standard for com- 
paring product usability that 
was spearheaded by the Na- 
tional Institute of Standards 
and Technology. 

Called the Common Indus- 
try Format for Usability Test 
Reports, the standard outlines 
a format for reporting test 


| conditions and results and 

| gives user companies enough 
| information about a test to 

| replicate it. It’s a means for 

| objectively evaluating soft- 

| ware, say its backers. 


Next month, NIST intends 
Usability, page 16 


Although generally satisfied 
with their roles, especially 
given high unemployment 
rates, most of the 1,400-pl 
IT workers and managers 
who participated in our an- 


nual Job Satisfaction Survey are sorely missing 
the perks of a healthy economy. What they're get- 
ting instead are increased workloads, fewer 
career opportunities and 

less training than ever. Our 

special report shows how 

IT workers really feel about 

their jobs, their bosses, 

their paychecks, their ca- 

reers and the industry. 
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Annoying error messages 


Recognize any of those issues? Or, perhaps, all of them? We 
thought so. That’s why we’ve made Microsoft® Windows” XP 
Professional and Microsoft Office XP Professional the most 
reliable desktop we've ever built. Want specific examples? 
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Everything worked fine yesterday 


Windows XP Professiona! has an average system uptime that is the current’document, spreadsheet, or presentation at the time 
10 times better than Windows 98 SE, and 3 times better.than an application stops responding, so usérs don’t lose all their work 
Windows NT 4.0, so there are fewer work stoppage‘incidents, (and don’t call the helpdesk looking for it). Warit more reaSons to ~ 
With AutoRecovery, Office XP Professional automaticallysaves upgrade? Visit-microsoft.com/desktop 


Data based on eTenting Labs Windows XP Reliability Study: Frit yeport avaitabte at: http _//werw.ctestinglavs.com/main,‘reports/msxprety pat © 2002 
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Focus on the best in network security, every step of the way. 


Start with a secure foundation. Integrate the best in network security expertise. 

Our operating system, IPSO, is built from the ground up for security. It eliminates rs like Check Point Software Technologies, Internet Security Systems and F5 
many vulnerabilities common to general-purpose servers, and also incorporates help us deliver the full capabilities of their VPN, firewall, intrusion protection, and 
our patented IP Clustering technology. Multiple Nokia security appliances can be Internet traffic management applications. To learn about the other ways we give 


linked as one, on the fly, for new levels of performance, reliability and scalability our customers greater peace of mind, just visit www.nokia.com/ipsecurity/na. 
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OPINION 


8 On the Mark: Mark Hall un- 
covers Novell’s sneak attack 
on Visual Studio .Net, looks 
at how Candle Corp. fills the 
gaps in IBM’s WebSphere 
world and eyeballs a few 
start-ups as well. 


Patricia Keefe isn’t per- 
suaded by the increasingly 
shrill arguments by vendors 
that IT executives need to 
spend, spend, spend in order 
to save the high-tech industry 
from its doldrums. 


22 Pimm Fox wants you to attend 
IT boot camp — not for basic 
training, but to hone the 
strategic skills so necessary 
in tough times. 


23 David Moschella argues that 
the era of IT creativity being 
dominated by vendors is over. 
Today, he says, it’s customers 
who innovate. 


38 Tommy Peterson says there’s 
a long way to go, but Web ser- 
vices reality will catch up to 
the hype. 


54 Frankly Speaking: Frank 
Hayes says it may be time 
to chisel the end date for 
Comdex on its tombstone, 
but he thinks IT users will 
always need a big event and a 
place to meet. 
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Dell, IBM to Ship 
Blade Servers 


Dell Computer Corp. today plans 
to take the wraps off of its blade 
server line by shipping a system 
that supports up to two Intel Pen- 
tium Ill chips. Dell said pricing on 
the PowerEdge 1655MC starts at 
$1,499 for a one-CPU model. IBM 
also is due to release new blade 
servers today. Its devices, which 
are based on Intel’s Xeon proc- 
essor, were introduced in Sep- 
tember [QuickLink 33136]. 


SBI Signs Deal to 
Rescue Razorfish 


SBI and Co., an IT services firm 
in Salt Lake City, said it has 
agreed to buy New York-based 
Razorfish Inc. for $8.2 million in 
cash. Razorfish, which develops 
customized Web-based applica- 
tions for corporate users, reported 
third-quarter revenue of $9.6 mil- 
lion. The agreement continues a 
string of deals under which SBI 

is acquiring once-highflying 
e-business consulting firms. 


DaimlerChrysler to 
Detail IT Projects 


At an event in New York, Daimler- 
Chrysler Corp. today plans to de- 
tail a series of IT projects it has in 
the works. The initiatives include 
development of a “digital factory 
floor” that lets the automaker's 
engineers use computer-aided 
design and manufacturing soft- 
ware to identify vehicle design 
constraints within a virtual man- 
ufacturing environment. 


Alcatel Warns of 


LAN Switch Flaw 


Paris-based Alcatel warned that a 
security vulnerability affecting its 
OmniSwitch 7700 and 7800 LAN 
switches could let attackers take 
full control of the devices. Users 
of vulnerable switches should ei- 
ther install a new software patch 
or block access to a specific TCP 
port that can be used to exploit 
the vulnerability, Alcatel said. 
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Homeland Security Bill 


Limits Vendor Liability 


| Private-sector 


software may also 
be affected by bill 


BY PATRICK THIBODEAU 
WASHINGTON 
l’S COMMON PRACTICI 
for IT vendors to limit 
their liability for the 
products they sell. But 
the homeland security bill 
passed by Congress last week 
may provide a federally sup- 
ported framework within 


| which vendors can protect 


themselves from legal action 


| by corporate users. 


The intent of the bill is to 
safeguard technologies that 


| vendors may be reluctant to 
| make available without liabili- 


ty limits, such as chemical, 


| biological and radiological 
| sensors. 


But the legislation is so broad 
that qualifying technologies 
may include widely used prod- 
ucts, such as firewalls, anti- 
virus software and intrusion- 





| detection systems, said experts 


familiar with the bill. The new 


| Department of Homeland Se- 


curity must determine which 
technologies qualify as contrib- 
uting to antiterrorism efforts. 


| Echoes of UCITA 


John Pescatore, an analyst at 
Gartner Inc. in Stamford, 
Conn., compared the federal 
liability provision to an effort 
to limit IT product liability in 
the states under the Uniform 
Computer Information Trans- 
actions Act (UCITA). 

“This seems to be trying to 
sneak in ‘UCITA lite’ on the 
federal level,” said Pescatore. 

David Colton, a vice presi- 
dent of the Information Tech- 
nology Association of Ameri- 


| ca, an industry trade group in 


Arlington, Va., that backed the 
liability-limiting provision, 
said the protections are criti- 
cal to ensuring that vendors 
can offer their most advanced 
hardware and software. 

The legislation will be espe- 
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ara) 
up to the new Department of 
Homeland Security, but liability 
protections could be extended 
to a broad range of products, 
from biosensors to firewalls. 


No - the protections could be 
extended to products sold to 
eS 


cially helpful for start-ups and 
smaller companies, “where 


| c . . 
| many of the most innovative 


and cutting-edge solutions 
come from,” said Colton. 
But if the liability protec- 


| tions are extended to systems 


that are routinely used by 


| businesses, it could only add 
| to the skepticism about the 


law’s intent. 
The legislation limits ven- 
dor liability to the maximum 


Feds Benefit From Head Start on Massive IT Integration 


WASHINGTON 

Creating a Department of Home- 
land Security will be a massive IT 
integration undertaking for the 
federal government. Fortunately, 
the Bush administration began 
working to improve the integra- 
tion of federal systems well be- 
fore Sept. 11, 2001. 

In its first budget, the admin- 
istration mapped out an IT ap- 
proach that emphasized systems 
integration, the use of off-the- 
shelf rather than proprietary soft- 
ware, and resource-sharing 
across agencies. That effort is 
already yielding results. 

The U.S. Department of Trans- 
portation, for instance, has moved 
to Oracle financial applications, 
ending its reliance on proprietary 
systems. 

“While we may not find an off- 


the-shelf-system that meets all 
our needs, we will recognize [its 
use] as a best practice, and we 
will re-engineer our business prac- 
tices to match that,” said a DOT 
Official, speaking anonymously. 

The DOT, like many other 
agencies, is deeply involved in 
architecture planning to map out 
systems and business process- 
es. Officials said that wiil lead to 
a coordinated investment in IT to 
meet the administration's goals. 
“If it's not in that blueprint, it 
won't get funded,” the DOT 
official said. 

Meanwhile, the U.S. Depart- 
ment of Defense is undertaking 
what may be the largest enter- 
prise architecture project in the 
federal government - one that 
involves the integration of nearly 
1,000 financial systems and busi- 


ness processes. The architecture 
planning for this $100 million 
project by IBM and New York- 
based subcontractor Popkin 
Software & Systems Inc. is due 
to be completed in the spring. 

None of this is to say it's a 
simple task that lies ahead for 
Steve Cooper, senior director for 
information integration and CIO 
of the White House's Office of 
Homeland Security, the prede- 
cessor of the Department of 
Homeland Security. 

As one senior White House of- 
ficial quipped, “Steve's biggest 
challenge is he has no money 
yet, so I'm not sure if he’s got 
anything beyond PowerPoint at 
this stage.” 

But now that the Department 
of Homeland Security has been 
officially mandated with last 





amount of “reasonably avail- 
able” insurance and bans puni- 
tive damages. It’s primarily 
aimed at government use of 
these technologies, but it 
doesn’t exclude businesses 
that purchase the same prod- 
ucts. For most user compa- 
nies, however, a law limiting 
liability won't significantly 
change what now goes on, ob- 
servers said. Most contracts 
already limit liability. 

“It doesn’t change the world 
too much, because we're not 
focused enough on holding 
vendors’ feet to the fire to 
build quality software,” said 
Gerry Brady, chief technology 
officer at Guardent Inc. in 
Waltham, Mass. 

Liability limitation in soft- 
ware has been a contested 
issue for many years. Alan 
Paller, director of research at 
the SANS Institute in Bethes- 
da, Md., said he believes buy- 
ers can address some of the 
contractual concerns if they 
exercise their “community 
responsibility” to require 
vendors to provide proactive, 
automatic correction of prob- 
lems, rather than searching for 
fixes on a Web site. 

“Since the problem is caused 
contractually, it can be solved 
contractually,” Paller said. D 


week's passage of the homeland 
security bill, government market 
analyst firm Input in Chantilly, 
Va., estimated that the agency 
will have at least $2.1 billion avail- 
able in the current year's budget 
for IT work. 

Payton Smith, an analyst at In- 
put, said most of the money will 
probably be spent on back-office 
integration. That should reduce 
IT costs over time and free up 
funds for customer-facing mis- 
sion-critical systems, Smith said. 

In an interview with Comput- 
erworld this summer [QuickLink 
31468], Cooper said his ap- 
proach involves “a huge change- 
management initiative.” 

“Unless there is an overall 
charter and a business strategy 
... the resulting IT enablement 
won't link beyond the organiza- 
tional boundaries,” he said. 

- Patrick Thibodeau and Dan Verton 
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Terraspring Gives Sun’s N1 a Boost 


Purchase of software firm gives vendor | 
key data center optimization technology | 


BY JAIKUMAR VIJAYAN 
Sun Microsystems Inc.’s re- 
cent purchase of privately 
held Terraspring Inc. gives 
Sun immediate access to some 
key technology components 
needed to execute its emerg- 
ing N1 strategy for data center 
optimization, analysts said. 

It also gives Sun ownership 
of a company in which rival 
Hewlett-Packard Co. was an in- | 
vestor and whose technology 
HP has used in its own Utility 
Data Center (UDC) offering. 

Sun announced the acquisi- 
tion of Fremont, Calif.-based 
Terraspring in a cash-for- 
stock transaction earlier this 
month but didn’t disclose fur- 
ther details. Founded in 1999 
by former Sun executives, Ter- 
raspring develops software to 
automate the creation and 
configuration of server farms. 

The company’s virtualiza- 
tion software allows adminis- 
trators to use browserlike in- 
terfaces to create and manage 
virtual server farms from a 
common pool of server, stor- 
age and networking resources. 


Critical Capabilities 

Such capabilities are crucial 
to Sun’s NI initiative, said 
Andrew Schroepfer, an ana- 
lyst at Tier 1 Research in Ply- 
mouth, Minn. 

Under NI, Sun is delivering 
technology and services aimed 
at helping corporations better 
manage and utilize their data 
center computing resources. 
Terraspring will provide the 
first deliverable technology un- 
der this initiative, Schroepfer 
said. With it, users will be able 
to pool and share data center 
resources as Sun has been 
promising under Nl, he said. 

“NI has been more of a vi- 
sion from Sun than anything 


Ni BACKGROUND 


For more information on Sun's N1 initiative, 
visit our Web site 


QuickLink 33051 
www.computerworld.com 


else up to this point,” Schroep- 
fer said. “This gives them a 
tangible piece of software that 
they can sell.” 

Sun will make a series of an- 
nouncements based on its Ter- 
raspring technology over the 
next few weeks, according to a 
company spokesman. “The ac- 
quisition was a coup for us. It 
gives us a leg up on the com- 
petition,” he said. 

An HP spokeswoman last 
week sought to downplay the 
company’s Terraspring con- 
nection and claimed that Ter- 
raspring was only one of many 
third parties HP worked with 
in developing UDC. She de- 


What’s Next? 


spokeswoman said. “We have 
access to third-party technolo- 


| gies, which we have enhanced 


Sun will roll out its N1 initiative 
in three phases: 

NEXT MONTH: It will start N1- 
enabling its hardware, storage 
and network products. 
2003: It will deliver services- 
provisioning software for auto- 
matically allocating resources 
to applications based on serv- 
ice needs. 

2004: It will start to deliver the 
final policy-automation piece. 


clined to elaborate on the ex- 
tent to which HP has used Ter- 
raspring technology in UDC. 
“UDC draws upon many el- 
ements from HP’s own portfo- | 
lio and from third parties,” the 


through our own engineering 
efforts.” 

The Sun spokesman said 
that HP had been licensed to 
use only an early version of 
Terraspring’s software and 
that its agreement doesn’t ex- 
tend to more recent versions. 

Sun’s move undoubtedly 
validates HP’s approach and 


| gives it a core technology in 


its NI] strategy, said John Ab- 
bot, an analyst at 45l.com Inc. 
in New York. 

But expect Terraspring tech- 
nology to find initial appeal 
only in “greenfield” sites rather 
than legacy sites because of 
the data center rewiring re- 
quired for Terraspring soft- 


Attachmate Adds Tools for Tying 
Legacy Data to New Applications 


New software 
meant as cheaper 
alternative to EAI 


BY CRAIG STEDMAN 
Attachmate Corp. today plans 
to announce software for inte- 
grating legacy mainframe and 
minicomputer applications 
with newer systems, the first 
of two steps it’s taking to ex- 
pand beyond the shrinking 
terminal-emulation market. 
The myExtra Smart Con- 
nector tools are due to be fol- 
lowed next quarter by a set of 
products that can be used to 
design new user interfaces 
for green-screen applications, 
said Markus Nitschke, vice 
president of marketing at At- 
tachmate in Bellevue, Wash. 
The company began limited 
shipments of Smart Connector 
last year, and Nitschke said 
that about 15 users have built 
applications with the technol- 
ogy so far. The tools convert 
legacy application data into 
formats such as XML and are 
aimed at short-term integra- 


tion projects as a lower-cost 
alternative to full-blown en- 
terprise application integra- 
tion (EAI) software, he said. 
For example, The Stanley 
Works, a New Britain, Conn.- 
based maker of hand tools, 
plans to use Smart Connector 
to tie applications on its back- 
end IBM mainframe and 
AS/400 (now called the iSeries 
by IBM) to a new online order- 
entry system based on Micro- 
soft Corp.’s .Net technology 
and BizTalk Server software. 


Automated Mapping 
K.C. Jones, .Net architect at 
Stanley, said other integra- 
tion technologies “were cost- 
prohibitive” compared with 
Smart Connector. The Attach- 
mate software also provides 
an automated way to map how 
legacy applications work, Jones 
added. “We have a lot of legacy 
code that was written before 
the dawn of time, and nobody 
knows what kind of logic is 
built into them,” he said. 

Jim Ingwerson, manager of 
call center integration at the 


Kansas Department of Hu- 
man Resources in Topeka, 
said cost was also a key factor 
in the state agency’s decision 
to choose Smart Connector 
over integration software from 
IBM and other vendors. 

The agency, which adminis- 
ters the unemployment insur- 
ance program in Kansas, used 
Smart Connector to tie a CICS 
claims-processing application 


| PRODUCT DETAILS 


myExtra Smart 
Connector 


SUPPORTS terminal-based 
applications for IBM main- 
frames and AS/400s, plus 
Unisys and Digital systems 
Support for Tandem systems 
is in the works. 


PROVIDES direct access to 
transaction data in mainframe 
applications that use IBM's 
CICS and IMS software 


CONVERTS legacy data into 
XML, Web services and tech- 
nologies such as Java and .Net 
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ware to work, he added. 

Sun’s move underscores the 
accelerating efforts by hard- 
ware vendors to gain an early 
lead in the emerging market 
for infrastructure optimization 
technologies, said John Mad- 
den, an analyst at Summit 
Strategies Inc. in Boston. 

“This is just the latest exam- 
ple of major systems vendors 
attempting to move ahead on 
projects that they see as tied 
to the future of computing,” 
Madden said 

Apart from HP and Sun, 
IBM is also working on similar 
data center optimization tech- 
nologies with its autonomic 
computing initiative. So too is 
Dell Computer Corp., which in 
April announced a partnership 
with Jareva Technologies Inc. 
in Sunnyvale, Calif., to enable 
remote provisioning, deploy- 
ment and configuration of 
servers. D 


running on an IBM mainframe 
to a Web-based self-service 
system that lets residents file 
unemployment claims online. 
Ingwerson wouldn't disclose 
how much the agency paid for 
the Attachmate software. But 
the integration project, which 
cost a total of $7 million, paid 
for itself within seven months 
through savings in areas such 
as call center staffing, he said. 
The Smart Connector line 
includes a drag-and-drop de- 
sign tool, a security and user 
authentication component, 
and runtime code that can be 
distributed across multiple 
Windows, Unix and Linux 
servers. Pricing starts at 
$65,000 per runtime server 
CPU and can exceed $500,000 
on big projects, Nitschke said. 
Mark Vanston, an analyst at 
Meta Group Inc. in Stamford, 
Conn., said Smart Connector 
is “a quick-and-dirty way” to 
hook new applications to lega- 
cy systems, a capability many 
EAI vendors have ignored. 
“But it’s going to be harder 
for Attachmate to sell than 
they think it is,” Vanston 
warned. Users that have al- 
ready bought EAI tools or ap- 
plication server software may 
not want to add another mid- 
dleware vendor, he said. B 





8 a COMPUTERWORLD November 25, 2002 NEWS / www.computerworld.com 


MARK HALL «ON THE MARK in. That’s the problem with poor data 


Microsoft Modifies 
Security Ratings ... 


Microsoft Corp. said it has revised 
the rating system it uses to signal 


the severity of security holes in its | 


software. The company added a 
fourth category, labeled “impor- 
tant,” for vulnerabilities that 
could compromise users’ data or 
systems. The maximum “critical” 
severity rating will now be re- 
served for flaws that could be 
used to propagate Internet 
worms, Microsoft said. 


... And Warns of 
Holes in Windows, 
Internet Explorer 


Microsoft also warned of new vul- 
nerabilities that affect Windows 
and its Internet Explorer (IE) Web 


_ Nakoma Nudges Novell 
Into .Net Realm... 


...and may give Microsoft Corp. fits as it tries to sell IT shops on its 
Visual Studio .Net. The next major facelift for NetWare, code-named 
Nakoma and expected to ship in mid-2003, will come with Novell 
Inc.’s exteNd application development environment bundled for free. 
Granted, there are millions of Visual Studio pros out there ready to 
migrate to .Net. And there are, well, to be kind, not millions of app 
creators using Novell tools for Web services. In fact, zero is a closer 
number. But the strategy makes sense, according to Corey Ferengul, 


browser. The vendor gave a “criti- | 


cal” rating to a buffer-overrun 
flaw in versions of its Microsoft 
Data Access Components soft- 
ware that are used in operating 
systems released prior to Win- 
dows XP. IE users are also at risk, 
it said. Microsoft issued a second 
patch that’s designed to address 
six other IE holes. 


Dell Plans Servers 
With Itanium 2 Chip 


Dell Computer Corp. plans to ship 
servers based on intel Corp.’s 
64-bit Itanium 2 processor, after 
initially not committing to do so. 
“It’s not a matter of if, but when,” 


a Dell spokesman said, confirming | 


that the company has an Itanium 
2-based system on its PowerEdge 
road map. He declined to disclose 
a shipment date. 


Short Takes 


BROCADE COMMUNICATIONS SYS- 
TEMS INC., a San Jose-based 
maker of storage networking 
switches, laid off about 160 em- 


ployees, reducing its workforce by | 


12%. . . . The fledgling UNITED- 
LINUX vendor consortium an- 
nounced its first operating system 
release and said members plan to 
ship products within two months. 


| VPN acceleration 


a VP at Meta Group in Stamford, Conn., 
who argues that there are two things in 
Novell’s favor. One, it’s early in the Web ser- 
vices game, and “no one has an advan- 
tage.” Two, NetWare operations staffers 
are often wary of apps 

“thrown over the fence by 

the development side” when 

they can do things them- hE 
selves. Let’s add a third: Ex- F 

teNd is a simple way to lever- 
age Java technology, which 
has no small amount of mo- 
mentum behind it. And 
maybe a fourth: It’s free, and 
Visual Studio .Net is anything 
but. Still, Novell's marketing 
misfits continue to stumble, at 
least as far as the silly render- 
ing of the product’s name: 
exteNd. Sheesh! # One of the 
industry’s largest and oldest ui 
privately held software com- 
panies, Candle Corp., has also 
taken liberties, in its case 
with the spelling of its Web- 
Sphere application infrastruc- 


Ch tele 


Tee leele eR UROL Cred 
management portion 
of its sourcing soft- 
WYER Rt} 
force contract com- 
EUR Come leer 
organizatio: 


Biometric device 
ST yea M ri meee- tele srt] 
eee ere Ti 
the planned 4.3 re- 
lease of its secure 
portal technology in 
O70 48 Ce 


| ture management environment, Path- 


WAI, which gets unveiled this week. 


| PathWAI combines products, services 
| and training with fixed prices for a vari- 
| ety of tools. They range from $17,000 to 


$100,000, depending on the 
bundle, according to VP 
David Caddis. He says Can- 
dle has targeted gaps in 
IBM’s WebSphere product 
line in the areas of architec- 
ture design, development, 
deployment and planning, as 
well as with monitoring and 
dashboard systems. He ac- 
knowledges that Candle is 
“plugging a hole that may go 
away someday” because IBM 
may go after it on its own — 
a strategy the company has 
finessed since 1976. Which 


ri 


you're a big pilot fish, the 
shark is always bigger. 
(Apologies to Computer- 
world’s own ravenous 
Sharky.) = Garbage in. Garbage 


Cisco Adds Network Security Tools | 





quality. Bad data stays bad unless you 
know something about its source. Greg 
Leman, CEO of Durham, N.C.-based 
Metagenix Inc., claims that data quality 
problems affect as much as 10% to 15% of 
stored information, especially because in- 
formation gets moved from one source 
application into another, such as when 
companies move supplier data into CRM 
systems. He’s betting that his company’s 
MetaPure 1.0, which will ship by the end 
of next month, will get that garbage out. Li- 
censed at $25k per year, it uses business 
rules written in PHP, a popular open- 
source scripting language, to analyze 
stored information to assess its quality, 
provide metrics and deliver quality re- 
ports. ® True believers hold dear that the 
Web is killing client/server technology. Not 
necessarily, think the thinkers at Denver 
start-up CenterStone Technologies Inc. 
They’ve already shipped a Web-based, 
order-management system for retailers 
to end the hassle of data quality prob- 
lems (see previous item for conspiracy 
theory verification) stemming from slop- 
py data entry from phone and fax orders. 
It has the standard online-inventory 
lookup and Web-based catalog info in its 
Buyer’s Page, an ASP-style service. While 


| no doubt a wonderful technology, it has 
| 6 : ; 
more than a few competitors, so Center- 


Stone is adding a client/server compo- 


| nent called Offline Module, which targets 
| road warriors who aren't constantly tethered 
| to the Internet (those blessed few). The 

| Offline Module synchronizes a user’s 

| new input on a laptop or Tablet PC with 
just goes to prove that even if | 
| that CenterPoint is using Microsoft's 

| .HTA file extensions to the same code 


the central database. The cool thing is 


base as its online-only modules. Expect 
the new service to be up and running by 


| the end of next month. D 


America and 1,200 small retail 
| stores that it operates. 
| Loos said the stores use Cis- 


Embeds firewalls, 


| modules in routers 


| Cisco Systems Inc. last week 
| related enhancements to its 


| networking product line, seek- 


| with comprehensive network 
| security management tools. 


BY MATT HAMBLEN 


announced a dozen security- 


ing to bolster its reputation for | 


providing corporate users 


Cisco put much of its em- 
phasis on embedding security 
technology into routers and 


| 
| 
| 
| 
| 
| 


other networking devices for 


| small offices and telecom- 


muters. 

For example, the company 
has added security features 
such as an embedded firewall 


| for IP data, voice and video to 
| its Cisco 800 Series and 
| SOHO 90 Series broadband 


routers for small and home 
offices. 


Cisco also announced virtu- 
| al private network (VPN) ac- 
| celeration modules for its 


2691, 3660 and 3700 series 
routers. The modules are de- 
signed to boost the perfor- 


| mance of branch-office VPNs 
| while decreasing CPU usage 


on the routers by 50%, accord- 


| ing to Cisco. 


Matt Loos, communication 
services team leader at Faste- 


| nal Co., said similar VPN ac- 


celerators on his Cisco 1700 
routers have been “huge, since 


| it meant the router was not 


working so hard to encrypt 


| and decrypt data.” 


Fastenal, a Winona, Minn.- 


| based distributor of construc- 


tion supplies, has tied its cor- 
porate databases to systems at 
five warehouses in North 


| co routers connected to Digi- 

| tal Subscriber Line or cable 

} modem connections, and a va- 
riety of protocols and firewall 
| protections are added to that 

| setup. 

Quay Corp., another exist- 

| ing Cisco customer, hopes to 
use enhanced 830 routers that 
are part of the Cisco 800 Se- 
ries to eliminate the need for 
separate firewalls in some 

| remote offices, said David 
Roessler, director of informa- 
tion systems at the Eatontown, 
N.J.-based electronics manu- 

| facturer. D 
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French Firm 
in Outsourcing 
Talks With EDS 


Alstom SA, a Paris-based con- 
glomerate with business units 
in the energy and transporta- 
tion industries, last week dis- 
closed that it has tentatively 
picked EDS tor what is ex- 
pected to be a multibillion- 
dollar IT outsourcing deal. 

Alstom said it’s in final ne- 
gotiations with EDS over a 
contract to outsource its IT in- 
frastructure, applications and 
related services in 14 coun- 
tries, including the U.S. About 
1,300 IT workers at Alstom 
would be transferred to EDS. 

EDS had been one of two 
companies vying for the con- 
tract, according to an Alstom 
spokesman. He declined to 
identify the other vendor or to 
comment on the expected val- 
ue of the pact with EDS. 

The anticipated deal is a 
piece of good news for EDS, 
which has been hit hard since 
warning in September that its 
financial results will likely be 
lower than expected in both 
the third and fourth quarters. 

Those financial woes 
played a role in this month's 
decision by Cincinnati-based 
Procter & Gamble Co. to give 
up on a one-vendor outsourc- 
ing deal it had been close to 
signing with EDS [QuickLink 
34271}. 

Also this month, New York- 
based J.P. Morgan Chase & 
Co. chose IBM over EDS for a 
seven-year outsourcing agree- 
ment that’s expected to be 
worth more than $5 billion and 
is now in final negotiations. 

But the situation at EDS 
isn't a cause of concern for 
Alstom, the company spokes- 
man said. “EDS has a suc- 
cessful track record,” he said. 
“We are not worried or anx- 
ious.” 

Mark Gilman, a spokesman 
for EDS, said the company ex- 
pects to finalize the dea! with 
Alstom next quarter. Alstom's 
annual IT spending totals 
about $400 million, he noted. 

-ToddR. Weiss 





NEWS 


EDS Looks Offshore, 


Standardizes Operations 


New initiative intended to lower costs 


and make IT services more consistent 





| BY TODD R. WEISS 


HREE WEEKS after 
announcing layoffs 
and other cost-cut- 
ting moves, Elec- 
tronic Data Systems Corp. last 
week detailed plans 
to rely more on facil- 
ities located outside 
the U.S. to provide 
application develop- 
ment and call center services 
to users on a global basis. 
EDS also said it will stan- 


| dardize its application services 
| Operations worldwide as part 


of the five-year, $100 million 
Best Shore effort. The strategy 


| was designed to help give EDS 


“a consistent delivery model 
worldwide” for its services, 


| said Paula Kruger, president of 


the Plano, Texas-based compa- 
ny’s customer relationship 
management division. 

EDS currently supports cus- 
tomers through more than 250 
facilities around the world, but 
Kruger said the hardware, 


software and service method- 
| ologies it uses sometimes dif- 


fer from location to location. 
Many EDS customers have 
their own facilities around the 
world and want more consis- 
tency, she added. 

As part of the Best Shore 
initiative, EDS plans to open a 
series of new offshore IT ser- 
vice centers. “We'll be looking 
at where are the optimal loca- 


| tions to serve clients, where 


they need it and when they 
need it,” Kruger said. 
The first facility is a call 


| center that’s scheduled to 


open next spring in Mumbai, 
India, with about 200 workers. 
Kruger said that the Mumbai 
operation is due to be expand- 
ed to 700 employees by 2004. 
EDS signaled its increased 
offshore focus last month 
when it disclosed cutback 
plans after reporting third- 
quarter results that were well 


STRATEGY 


below expectations. The com- 
pany said then that it would 
shift 1,500 U.S.-based jobs to 
lower-cost facilities in other 
countries [QuickLink 34079]. 
| Best Shore also includes 
steps designed to rein 
in expenses. For ex- 
ample, Kruger said 
EDS officials hope 
that standardizing the 
technology used in its facilities 
will result in cost savings that 
can help keep down the prices 
the company charges. 

Andrew Efstathiou, an ana- 
lyst at The Yankee Group in 


| Boston, said EDS’s standard- 
ization strategy is similar to 
the approaches taken by other 
IT services providers, includ- 
ing IBM and Accenture Ltd. 
“Certainly, this type of coordi- 
nated delivery is not anything 
new,” he said. “I would say EDS 
is promoting this ... because 
they need to control their costs 
— and pricing as well.” 
| Instead of focusing on mak- 
ing changes in the way it de- 
livers IT services, EDS has 
been working aggressively to 
win new contracts, according 
to Efstathiou. “They’ve been 
very slow to change their busi- 
ness model,” he said. 
Nonetheless, the move to 
| standardize operations is a 





www.computerworld.com 


good one for EDS, said 
Michael Corbett, president of 
Michael F. Corbett & Associ- 
ates Ltd. in LaGrangeville, N-Y. 
“There’s a lot of companies 
that are really just beginning 
to create the kind of global, 
free-flowing infrastructure 
that they should have had 
from the beginning,” Corbett 
said. D 





Postmerger 


Vendor grows 
sales, cuts losses 
in key businesses 


BY JAIKUMAR VIJAYAN 

| Hewlett-Packard Co.'s better- 
than-expected performance in 
its second full quarter as a 
merged entity is being viewed 
by analysts as a sign that the 

| company may have put most 
of its integration-related 
issues behind it. 

HP last week reported rev- 
enue of $18.05 billion for its 
fourth quarter, which ended 
Oct. 31, compared with a com- 
bined total of $18.17 billion 
that HP and then-separate 
Compaq Computer Corp. re- 
ported a year ago. During the 
period, HP netted a profit of 
$390 million. As a merged 
company, it would have re- 
ported a $505 million loss for 
the same quarter last year. 

Though product revenues 
were lower than in the previ- 
ous year in almost all cate- 
gories, they were higher than 
they were in this year’s third 





HP Results Paint Rosy 


Picture 


quarter. HP also managed to 
cut operational losses in two 
key lines of business: enter- 
prise systems and personal 
systems. 

“Overall, we are starting to 
deliver on the promise of the 
| merger with improved cost 
structures, improved prof- 
itability, improved competitive 
position and improved cash 
flow,” said HP CEO Carly Fior- 
ina in announcing the results. 

HP’s high-end enterprise 
systems revenue of $4.1 billion 
was 8% higher than it was in 


HP REPORT CARD 


Results by business segment: 


MAGING AND PRINTING 
Revenue: $5.6B 

Profit: $926M 
PERSONAL SYSTEMS 
Revenue $5.1B 

Loss: $87M 


ENTERPRISE SYSTEMS 
Revenue: $4.1B 
Loss: $152M 


SERVICES 
Revenue: $3.1B 
Profit: $381M 








| the third quarter. The business 


lost $152 million, but that was a 
substantial improvement over 
the $422 million loss in the 
third quarter. The high-end Su- 
perdome Unix server business 
grew substantially both in rev- 
enue and units shipped during 
the fourth quarter, HP said. 
HP’s success with the Su- 


| 
perdome was somewhat sur- 


prising, given the overall slow- 
down in the scalable Unix 
server market, said Jean Boz- 
man, an analyst at IDC in 
Framingham, Mass. “They are 
competing in a market that 
has seen very intense price 
pressure,” she said. 

The company also cut oper- 
ating losses by more than 50% 
in its personal systems group, 
which recorded revenue of 
just over $5 billion. 

As expected, HP’s strongest 
performer continued to be its 
imaging and printing group, 
which posted an operating 
profit of $926 million on rev- 
enue of $5.6 billion. 

HP’s performance six 
months after the completion 
of its merger with Compaq is 
promising, said Terry Shan- 
non, editor of “Shannon 
Knows HPC,” an Ashland, 
Mass.-based newsletter. D 
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NEWS 


Microsoft Says Windows .Net 
Server 2003 Set to Ship in April 


Long-awaited OS availability announced 


amid other Comdex 


BY CAROL SLIWA 
LAS VEGAS 
ICROSOFT CORP. 
last week used 
the spotlight of 
Comdex/Fali 
2002 to unveil note-taking 
software, a Web service being 
developed with Kinko’s Inc. 
and smart personal object 
technology, all expected to 
launch next year. 
But the news that will have 
a more immediate impact on 
IT managers was the an- 
nouncement of the launch of 
the long-delayed Windows 
-Net Server 2003. Bill Gates, 
chairman and chief software 
architect, said Microsoft ex- 
pects to release the new serv- 
er operating system in April. 


| 


| overall fine-tuning and work 


| ability scenarios.” 





Windows .Net Server origi- 
nally was scheduled to ship at 
the same time as its client op- 


| Server will support 64-way 


product releases 


uct manager in the Windows 


erating system counterpart, 
Windows XP, which hit the 
market in October 2001. Earli- 
er this year, Microsoft execu- 
tives said the server operating 
system would be released to 
manufacturing by year’s end 
and be generally available in 
the first quarter of next year. 
Bob O’Brien, a group prod- 


server division, said the secu- 
rity review that Microsoft 
conducted as part of its Trust- 
worthy Computing initiative 
was partly responsible for the 
delay. He attributed the rest to 


done to enable “high-end scal- 


“We really want to make 
sure this release is right,” 
O’Brien said. 

O’Brien said Windows .Net 





processor systems and hyper- 
threading, an Intel Corp. tech- 
nology that can make a four- 
processor system perform like 
an eight-processor system. 
The second release candidate 
of the operating 
system will be 
available in the next 
few weeks, Micro- 
soft said. 
Meanwhile, the final beta of 
Microsoft’s Visual Studio .Net 
2003 development tool is 
available now. The product is 
scheduled to ship in April. 


More to Come 
Microsoft also announced the 
following at Comdex: 

@ OneNote, an application 
for Microsoft’s Office family 
designed to help users take 
and organize notes, whether 
they’re typed, spoken or hand- 
written. The notes can be 
searched and shared in ways 
other Microsoft applications 
don’t currently permit. The 


WorldCom Users Like Capellas 
Hire but Worry About Breakup 


Prospect of using | 
more than one | 
telco a concern | 


BY MATT HAMBLEN 

Corporate users reacted with 
guarded optimism this week 
to the appointment of Michael 
Capellas as CEO of WorldCom 
Inc., though some network 
and telecommunications man- 
agers who use WorldCom’s 
services said they’re a bit wor- 
ried about the chance that the 
company could be split up as 
part of its bankruptcy pro- 
ceedings. 

A breakup could force cus- 
tomers to work with two or 
more vendors for various net- 
working services, users said. 





Another topic: the possi- 


bility that WorldCom’s next | 
chairman could be former | 
New York Mayor Rudolph 
Giuliani. 

“Do I care if it’s Mike Capel- 
las or Rudy Giuliani? Not par- 
ticularly,” said Carol Jackson, a 
vice president at Minnesota 
Telecommunications Associa- | 
tion Inc., a 500-member user 
group in Minneapo- 
lis. “Mainly, we want 
WorldCom to come 
out of the reorgani- 
zation and don’t 
want them torn 
apart.” 

Jackson is the 
telecommunications 
manager at a Min- 
nesota-based con- 
sumer products 
manufacturer that 


CAPELLAS says 
keeping WorldCom 
TORE BELEN 


relies on several core services 
from WorldCom, including 
frame-relay ports, nationwide 
toll-free access and electronic 
data interchange networks. 
Officials from her company, 
which she requested not be 
named, met with a WorldCom 
vice president shortly after 
the vendor sought Chapter ll 
protection in July. 

“He assured us 
that WorldCom still 
wants our business,” 
Jackson said. Since 
then, there have been 
no disruptions in ser- 
vice, she added. 

Bob Neuberger, in- 
frastructure manager 
at National Semicon- 
ductor Corp. in Santa 
Clara, Calif., said 


MORE THIS ISSUE 


For more Comdex news, see 
pages 1 and 53. 








product is expected to be 
available in mid-2003. 

w A Web service, due in 
mid-2003, that will let enabled 
users print directly from Mi- 
crosoft applications to any 
U.S. Kinko’s loca- 
tion. Neil Charney, 
director of .Net 
platform strategy at 
Microsoft, said a 
Component Object Model 
add-in will be developed for 
the Microsoft applications to 
locate the Web service, which 
will be written by Kinko’s. 

“It’s your virtual printer ca- 
ble to 1,100 digitally connected 
stores,” said Daniel Conner, 
senior vice president of corpo- 
rate strategy at Dallas-based 
Kinko’s. 

Clearly, however, it won’t 
benefit all companies. Graham 
Nielson, computer systems su- 
pervisor at Nielsons Skanksa 
Inc. in Cortez, Colo., noted 
that the Kinko’s nearest to his 
company is eight hours away. 


both Capellas and Giuliani 
sound good to him. But he said 
he’s more concerned about 
whether WorldCom can re- 
solve disruptions to its man- 
aged remote dial-up access 
service, known as PAL. 
WorldCom plans to phase 
out the service over the next 
two years and has been con- 
solidating some of the access 
lines, according to Neuberger, 
who is seeking an alternative 
service. A WorldCom spokes- 
woman responded that PAL is 
still being supported and said 
the company is meeting its 
service-level agreements. 
Capellas, who resigned as 


| president of Hewlett-Packard 


Co. two weeks ago [QuickLink 
34410], is due to assume the 
CEO job at WorldCom next 
Monday. When his hiring was 
announced Nov. 15, Capellas 
said that keeping WorldCom 
unified would be one of his 
priorities. He later said he 
would welcome a chance to 
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FEATURES 


= Smart Personal Object 
Technology, which can let de- 
vices like alarm clocks, watch- 
es or pens provide timely in- 
| formation updates such as 
weather and traffic reports or 
schedule changes. D 





meet with Giuliani about the 
chairmanship, according to 
the WorldCom spokeswoman. 

Giuliani now runs Giuliani 
Partners LLC, an investment 
consultancy in New York. Last 
week, the former mayor said 
he wants to help turn around 
WorldCom but added that it 
was premature for him to seek 
the position of chairman. 

An attorney who represents 
| 19 of WorldCom’s largest cus- 
tomers, including General 
Motors Corp. and Sun Micro- 
| systems Inc., said Giuliani and 
Capellas might end up being 
at odds over the issue of keep- 
ing the company together. 

“I don’t know if Capellas 
and Giuliani can work togeth- 
er, but it would be very bad for 
large users if the reorganiza- 
tion turns into fighting over 
the body of WorldCom rather 
than resurrecting it,” said 
Hank Levine, a partner at 
Levine, Blaszak, Block and 
Boothby LLP in Washington. DB 
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Reallocate your resources. HP Proliant DL 58062 Server 


with Intel” Xeon” processors 


Server time and space are precious commodities, at least from where 
you're sitting. Your customers are clamoring for more, more, more, while 
you try to figure out how to deliver with less, less, less. 


HP ProLiant servers, powered by Intel® Xeon™ processors, put you in 
control of your resources so that you can realize the true potential of your 
infrastructure. ProLiant Essentials Workload Management Pack software 
lets you allocate your resources to specific tasks and then reallocate them 
as needed — automatically. We call it Dynamic Resource Scaling. And with 
this added control and increased visibility, you may even find you 
can boost efficiency by placing more workload on those same servers. 


It all adds up to faster, better distribution, increased RO! and gigantic 
leaps forward in customer satisfaction. Which, of course, is a relief to you 


Visit www.hp.com/go/proliant73 or call 1.800.282.6672, 
option 5, and mention code XFE for a white paper on 
adaptive infrastructure and a free trial of HP ProLiant 
Essentials software* 


© 2002 HewlettPackard Company. intel, the Intel inside Logo and Xeon are trademarks or registered trademarks of the Intel Corp n OF its 3 es in the United States and other countries. * Workload Management Pack and Rapid Deployment Pack only. For U.S 
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Microsoft Updates 
64-bit SQL Code 


Microsoft Corp. released a second | 
beta-test version of its upcoming 
64-bit SQL Server 2000 data- 
base, which is due for commercial 
shipment next April along with 
the 64-bit Windows .Net Server 
2003 operating system. At a con- 
ference in Seattle for SQL Server 
users, the company also said a 
third set of bug fixes for the 32- 
bit version of SQL Server 2000 is 
now available for beta-testing. 


Energy Dept., IBM 
Sign $290M Deal 


The U.S. Department of Energy 
said it has awarded IBM a $290 
million contract to build what the 
agency claimed will be the two 
fastest supercomputers developed 
thus far. The systems are expect- 
ed to have a combined peak per- 
formance of 4609 trillion calcula- 
tions per second. IBM said it will 
deliver the machines in a staged 
process that’s due to start next 
year and be completed in 2005. 


IBM Taps Research 
Unit for IT Services 


IBM set up a new unit within its 
research division to offer business 
transformation and technology 
consulting services to users. The 
company said the 200-worker 
group is its first research-oriented 
operation that will work directly 
with customers. IBM added that it | 
plans to support the unit with an 
investment of about $1 billion 
over the next three years. 


Short Takes 


The LIBERTY ALLIANCE PROJECT 
updated its specifications for set- 
ting up single sign-on and decen- 
tralized user authentication ser- 
vices. . .. The San Diego-based 
HIGH PERFORMANCE WIRELESS 
RESEARCH AND EDUCATION NET- 
WORK reduced the amount of 
power it uses on a 72-mile wire- 
less LAN link following complaints 
that its configuration was illegal. 


| 
| 
| 
| 
| 
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Al-Qaeda 


cause of somebody attacking 
the main technical systems in 
big companies.” 

The White House declined 


| to comment. However, U.S. 


Navy Cmdr. David Wray, a 
spokesman for the FBI’s Na- 


| tional Infrastructure Protec- 


tion Center (NIPC), said the 
NIPC is “concerned about the 
potential for terrorists to use 
the Internet to inflict damage, 
as well as using it as a commu- 
nications tool.” 

“Among the stated goals of 
al-Qaeda is a desire to cause 
economic harm to the U.S., 
and the Internet is a vital ele- 
ment of our economy,” 


Cyberwarfare Alert 


Although some experts said 


| they doubt Bakri has detailed 


knowledge of any specific al- 


| Qaeda plans, others character- 


ized his remarks as the first af- 


| firmation of cyberwarfare 


planning by a high-profile rad- 
ical Islamic leader with ties to 
terrorist organizations. Bakri 
is the founder of the London- 


| based group Jama’at Al-Muha- 
| jirun and is a self-described 


spokesman for Osama bin 
Laden’s International Islamic 
Front for Jihad Against Jews 


| and Crusaders. 


“There has been much spec- 


he said. | 


| tal mistake.” 

| has underestimated the time 

| : : 
al-Qaeda dedicates to studying 


| into computer science” 





ulation and some evidence 


| that cyberterrorism is a com- 


ponent in their bags of tricks,” 
said Brian Kelly, president and 
CEO of iDefense Inc., a cyber- 
security company in Chantilly, 
Va. “But to my knowledge, this 


| is the first clear statement 


from a senior representative 
linked directly to the use of 


| cyberterror to help achieve 


their aims.” 

Roger Cressey, former chief 
of staff of the president’s Criti- 
cal Infrastructure Protection 
Board, said he is unaware of 
any other high-profile radical 
figures with links to bin Laden 
who have talked in such detail 
about attacks on global infor- 
mation networks. 

Cressey said any characteri- 
zation of international terror- 
ist groups as technologically 
unsophisticated bands of 
thugs would be “a fundamen- 
He said the U.S 


the “fissures” in the U.S. secu- 
rity apparatus and that it’s 


| clear that al-Qaeda and other 


groups are “pushing students 
for 
these purposes. 

Vince Cannistraro, former 


| chief of counterterrorism at 


the CIA, agreed and said many 
Islamic fundamentalists, some 
of them close to al-Qaeda, 
have developed expertise in 
computer science. “And some 
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| would not be 
surprised if tomor- 


row | hear of a big economic 

collapse because of some- 

body attacking the main 
technical systems in big companies. 


SHEIKH OMAR BAKRI MUHAMMAD, FOUNDER, JAMA’AT AL-MUHAJIRUN 


are well schooled in how to 
carry out cyberattacks,” Can- 
nistraro said. “We know from 
material retrieved from [al- 
Qaeda] camps in Afghanistan 
that this is true.” 

Bakri emphasized that jihad 
groups are very active on the 
Internet and referred specifi- 
cally to “millions of Muslims 
around the world involved in 
hacking the Pentagon and Is- 
raeli government sites.” 


Technology as a Weapon 
Although security experts con- 
sider Bakri’s “millions” claim 
to be an exaggeration, Cressey 
noted that “a cadre is being 
created of very computer- 
literate students” in places 
such as Pakistan and Malaysia. 
“I would advise those who 
doubt al-Qaeda’s interest in 
cyberweapons to take Osama 
bin Laden very seriously,” 
said Bakri. “The third letter 
from Osama bin Laden a few 


War With Iraq Will Mean Virus Outbreak, Hacker Threatens 


A Malaysian virus writer who is 
sympathetic to the cause of the 
al-Qaeda terrorist group and Iraq 
and has been connected to at 
least five other malicious-code 
outbreaks is threatening to re- 
lease a megavirus if the U.S. 
attacks Iraq. 

The virus writer, who goes by 
the handle Melhacker and whose 
real name is believed to be Viadi- 
mor Chamikovic, is thought to 
have written or been involved 
in the development of the VBS.- 
OsamaLaden@mm, Melhack, 
Kamil, BleBla.J and Nedal worms. 

However, in an exclusive inter- 
view last week with Computer- 
world, Melhacker confirmed 


earlier reports by cybersecurity 
company iDetense that he has 
developed and tested a “three- 
in-one” megaworm code-named 
Scezda that combines features 
from the well-known SirCam, 
Klez and Nimda worms. 


The Worm Is Ready 
“This is a real Internet computer 
worm,” said Melhacker. “I will 
attack or launch this worm if 
America attacks Ira.” The worm 
has been ready and fully tested 
in his lab since August, he said. 
tomers that “eg 
’ reports that he 
ties to both Russian hackers and 
Pakistani virus writers. 


Sees 


Brian Kelly, president and 
CEO of iDefense, said that al- 
though Melhacker hasn't proved 
adept at seeding new worms in 
the wild, this one could be diffi- 
cult to stop. 

IDefense quietly warned its 
clients earlier this month about 
the potential for such a worm 
to hit the Internet. it said com- 
panies should move to a height- 
ened state of alert and watch for 
suspicious Internet traffic and 
e-mails if Iraq is attacked. 

“if he were to be successful 
with this one, it could be very 
serious,” said Kelly. “Although 


Russian and Palestinian code- 





months ago was clearly ad- 
dressing using the technolo- 
gy in order to destroy the 
economy of the capitalist 
states. This is a matter that 
is very clear.” 

But the degree to which that 
threat is cause for concern is 
debatable. 

“IT have no doubt that these 
guys are serious about want- 
ing to target the computer 
and information system in- 
frastructure,” said Larry John- 
son, a former CIA officer and 
deputy director of the U.S. 
State Department’s Office of 
Counterterrorism. “However, 
these guys are like Hitler in 
the bunker during the final 
days of World War II. They 
are developing plans and di- 
recting nonexistent armies.” 

Johnson added that al- 
Qaeda’s ability to bring down 
systems probably “lacks the 
punch of a good old-fashioned 
ice storm.” D 


authoring groups, we're not yet 
sure how strong those relation- 
ships are.” 

Vincent Gullotto, vice presi- 
dent of the : 
Response Team at McAfee Secu- 
rity, a division of Network Associ- 
ates Inc., said the threat posed by 
Scezda is completely dependent 
on whether Methacker is suc- 
cessful in getting it to propagate. 

“it he is, it could be very large,” 
said Gullotto. 
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’s Retiring Wan 
Leaves Lasting Legacy 


Even his many critics acknowledge 
achievements at company he founded 


BY MARC L. SONGINI 
OVE HIM or hate him, 
retiring Computer As- 
sociates International 
Inc. Chairman Charles 

Wang will have a lasting influ- 

ence not just on CA, but on 

the software industry as a 

whole. 

That was the consensus of a 
group of industry analysts and 
CA watchers interviewed by 
Computerworld last week after 
Wang, 58, announced that he 
was stepping down as chair- 
man of the massive software 
company he co-founded more 
than 25 years. 

Not surprisingly, filling his 


Continued from page 1 
Usability 


to seek international stan 
dards recognition. The stan- 
dard has already received 
American National Standards 
Institute certification. 

CIF’s success as a purchas- 
ing tool depends on whether 
other companies follow Boe- 
ing and make usability a 
“peer,” as Boeing officials put 
it, of such traditional purchas- 
ing criteria as a product’s 
functionality, price and system 
requirements. If that happens, 
users say, the standard could 
have a far-reaching effect in 
improving the usability of 
software. 

“The real value of CIF, quite 
honestly, is that if vendors 
know we are expecting it, 
meaning large software pur- 
chasers, they will focus their 
attention on usability and 
hopefully make their products 
better before they ever come 
out the door,” said Jack Means, 
superintendent of usability at 
State Farm Insurance Cos. in 
Bloomington, III. 

Boeing played a lead role in 


| seat is CA President and CEO 
| Sanjay Kumar, who took the 
company’s reins when Wang 
stepped down from the CEO 
position two years ago. 
Known for growing the 
| company by way of acquisi- 
| tions, Wang — and CA — also 
| acquired a reputation for gob- 
bling companies, gutting them 
and giving the inherited cus- 
tomers short shrift. To some, 
Wang’s departure shows that 
he decided to turn CA over to 
the soft-spoken Kumar, who 
could cast the company in a 
more attractive light. 
The move seems to “further 
support and validate Sanjay’s 


the development of CIF after 
its experience and internal 
studies showed that usability 
played a significant role in to- 
tal cost of ownership. In one 
pilot of the CIF standard ona 
widely deployed productivity 
application, the Chicago- 
based company said improved 
product usability had a cost 
benefit of about $45 million. 

Butler said it’s much better 
to have vendors refine an in- 
terface design “than to have 
thousands of end users doing 
it involuntarily on top of their 
jobs and then just feeling frus- 

| trated.” 


| Spotting Problems Early 

| Doug Francisco, director of IS 
architecture at Boeing’s com- 
mercial airplane division, 
maintains that CIF will im- 
prove the ability of the IT de- 

| partment to spot problems be- 

| fore a product is rolled out to 

| employees. The company has 

| looked at usability in purchas- 
ing, “but sometimes we would- 

| n’t discover the inefficiencies 

| of a software product until we 
brought it in-house,” he said. 

Microsoft Corp., in its ca- 

pacity as a CIF development 


| 
| 
| 
| 
| 


| business,” said Sherry Irwin, 


| am pleased to have completed 





| 
| 
| 
| 


| [(QuickLink 27596], Kumar 


NEWS 


approach, which appears to 
have had definite and positive 
results on the way CA does 


chairman of the Toronto-based 
Canadian Software Asset Man- 
agement Users’ Group. 

In a statement, Wang said, “I 


the transition of leadership to 
Sanjay, who has been a trusted 
colleague and a valuable part- 
ner, in a smooth and orderly 
way.” In light of that, many an- 
alysts said they don’t expect 
much change in how Islandia, 
N.Y.-based CA does business. 
Although Wang and Kumar 
were unavailable for comment 
last week, ina Computerworld | 
interview earlier this year 





noted that the old CA manage- 


participant, has incorporated 
the usability testing it con- 


Windows ME and Windows 
2000 operating systems into 
the CIF format, said Kent Sul- 
livan, Microsoft’s usability 
lead for the Windows client. 
Sullivan said Microsoft is 
prepared to use CIF but noted 
that its adoption will depend 
on customer demand. Micro- 


| soft typically doesn’t receive 


questions about usability from 


| customers, so when users do 


ask about it, he said, “it indi- 


| cates that they are ahead of 
| the curve a little bit.” 


In the past year, interest in 


| CIF has grown from about 50 


| effort to more than 150, includ- 





firms taking part in the NIST 


ing PeopleSoft Inc., Oracle 


| Corp. and Eastman Kodak Co. | 


The CIF format will also be 


adapted for hardware testing, | 


said Emile Morse, who heads | 
the effort for NIST. Morse said | 
she believes CIF makes it pos- | 
sible for vendors and users to | 
discuss usability asascience | 
rather than marketing hype. “I | 
think CIF gives alot of credi- | 
bility to the practice of usa- | 
bility,” she said. D 


| CA holding to the 


ment style created 
some obstacles. 

“T think we’ve all 
grown up,” Kumar 
said at the time. “I 
think if you talk to 
Charles today about 


| the company ... he 


would say, ‘Often we 
were very black and 
white about things.’ 

You often hear about 


letter of a contract 

— I think it’s that kind of be- 
havior [that caused problems]. 
At one time, we had many, 
many pieces of customer liti- 


| gation.” 


Nevertheless, even Wang’s 
critics — and he has plenty of 
them — acknowledge his 
achievements. He helped in- 
vent not only a company that 
has raked in billions of dollars, 


| but also the network and sys- 


tems management market. 
“I think you can heap all the 


| criticism you want on him,” 


said Frank Dzubeck, an analyst 


| CIF FAQ 


| ducted on its Windows XP, | 


Most vendors conduct usability 
testing. The Common Industry 
Format for Usability Test Re- 


ports (CIF) provides an objec- 
tive means for evaluating test- 
ing data. 


WHAT IS USABILITY TESTING? 
lt broadly measures task-comple- 
tion rates. Test subjects are moni- 
tored as they use software. 
WHO BENEFITS? Large user 
companies with usability experts 
on staff who can interpret test 
results. 


WHAT CAN USER COMPANIES 
DO? When purchasing software, 
they caii ask vendors for CIF re- 

ports to compare product usabil- 
ity. They can also replicate tests. 


WHERE DOES CIF STAND? If 
large user companies ask ven- 
dors to produce usability tests in 
the CIF format, the standard 
could win wide acceptance. Its 
future is up to users. 


More technical information 

on CIF and a list of companies 
participating in its development 
are available at http://zing.ncsi. 


nist.gov/iusr/into/list-iname. 
shtml. 


The hard-driving 


turning CA over to 
the soft-spoken 
SST ACU 





www.computerworld.com 


at Communications 
Network Architects 
Inc. in Washington. 
“But he took a small 
Long Island-based 
mainframe utility 
company and grew it 
into one of the 
largest software com- 
cm panies in the indus- 
try. How he did that 
is open to dispute.” 
Employees of the 
companies that 
CA acquired hated the idea 
of a buyout because “they 
knew they were gone,” said 
Dzubeck. “He was buying as- 
sets, not people, because he 
wasn’t going to grow the busi- 
ness. Development wasn’t his 
focus in life.” 


Image Makeover 

That image has been some- 
thing that Wang and hand- 
picked successor Kumar have 
been at pains to improve upon 


| of late. 


“One of the interesting 
things you’ve seen over the 
last few years is that they’ve 
moved away from growth by 
acquisition to growth through 
software development,” said 
James Hurley, an analyst at 
Aberdeen Group Inc. in 
Boston. They have also moved 
away from playing hardball 
with customers to making 
them partners, he said. 

“[Wang] built CA on the ba- 
sis of a focused ‘take-no-pris- 
oners’ drive for the revenue 


| dollars, [which] alienated 


some but resulted in a compa- 
ny that employees perennially 
rank as one of the top places 
to work,” said Richard Ptak, an 
analyst at Ptak & Associates 
Inc. in Amherst, N.H. 

“I think Charles Wang may 


| be one of the last of his kind 


we see in the IT business,” 
said Michael Dortch, a San 
Francisco-based analyst at 
Robert Frances Group Inc. “It 
seems almost impossible, in 
this day, age and economy, to 
imagine four people and one 
product growing into one of 
the oldest, largest and widely 
known vendors on the planet. 
“It’s pretty clear that if 


| Charles Wang hadn't existed,” 


he said, “the IT industry would 
have had to invent him.” D 
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Network Managers Worried About 
Possible Voice-Over-IP Restrictions 


‘Tax issues put cost 
benefits at risk 


BY MATT HAMBLEN 
NEW YORK 

Reacting to a recent move by 
Panama’s government to im- 
pose limitations on voice- 
over-IP (VOIP) traffic, IT 
managers who attended a net- 
working-related meeting here 
this month criticized attempts 
to tax or restrict the use of the 
technology. 

“If you put a tax on data, 
where do you stop?” asked 
Robert Boas, a senior telecom- 
munications consultant at Ar- 
vato Systems GmbH in New 
York. Arvato, a unit of Bertels- 


| mann AG that offers IT host- 

ing services, already pays mil- 
lions of dollars each year to 

| network and voice carriers, 

| plus an additional 18% to cov- 
er government fees and taxes 

in the U.S., he said. 

New taxes or fees could re- 
duce the cost incentive for 
moving traditional voice traf- 
fic to IP networks, Boas and 
several other telecommunica- 


| tions and data network man- 


agers said at a monthly meet- 
ing of Communications Man- 
agers Association Inc., a New 
York-based user group. 

For companies in the U.S., 


| the concerns about increased 


costs primarily apply to the 





use of the public Internet to 


“ 


provide VOIP services to tele- 
commuters and workers in re- 
mote offices. 

Most corporate users proba- 
bly already pay Universal Ser- 
vice Fees and access charges 
for private lines that carry 
VOIP traffic, said Colleen 
Boothby, a partner at law firm 
Levine, Blaszak, Block & 
Boothby LLP in Washington. 
But VOIP transmissions that 
go across the public Internet 
in the US. aren’t subject to 
such fees, she added. 

VOIP taxation “is a really 
scary prospect,” said Jack 
Pavelko, information systems 
lead analyst at BASF Corp., a 
chemicals maker in Mount 





Olive, N.J. BASF is considering 


expanding its use of VOIP 
beyond seven help desk work- 
ers who recently began using 
IP phones. Pavelko said his 
start-up investment of about 
$14,000 should be recouped 
within two months, because it 
previously cost $8,000 month- 
ly for traditional local and 
long-distance service for the 
seven workers. 

The Panamanian govern- 
ment decreed Oct. 25 that In- 
ternet service providers in 
that country must block ports 


Many foreign 
governments 


hate VOIP. There 
is real hostility. 


COLLEEN BOOTHBY, PARTNER, 





LEVINE, BLASZAK, BLOCK & BOOTHBY 
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used for VOIP services to pre- 
vent the loss of tax revenue 
collected on traditional voice 
services. The decree will af- 
fect IP traffic passing through 
Panama, as well as traffic orig- 
inating there, although some 
observers said it’s unclear how 
strict the government will be 
about enforcing the decree. 

“Many foreign governments 
hate VOIP. There is real hos- 
tility,” said Boothby, whose 
law firm represents compa- 
nies that buy network services 
in contract negotiations with 
carriers and in proceedings 
before the Federal Communi- 
cations Commission. 

Boothby and Harry David- 
ow, an attorney for AT&T 
Corp., both said U.S. cities and 
states are eyeing various com- 
munications fees and taxes as 
a way to raise more revenue in 
these tough economic times. D 
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OPINION 


PATRICIA KEEFE 


The Heat Is On 


DON’T KNOW whether you've noticed, but af- 
ter two niggardly years, vendors are getting 
restless. As 2002 stumbles toward a haggard 
close, the year isn’t the only thing your ven- 
dors, consultants and integrators want to see 
come to an end. They want you to open up your 
budget, and they want you to do it now. 
All of their wheedling, pleading and incentives 


haven’t worked their magic. Vendor stocks are close | 


to rock bottom, sales 
cycles have slipped into 
an endless loop, and up- 
ward migrations have 
slowed to a trickle. IT 
suppliers and advisers 
have cut costs while try- 
ing to find new revenue 
streams. But to no avail. 

As a result, there ap- 
pears to be a new willing- 
ness to speak more blunt- 
ly to IT execs and to ex- 
ert more pressure. The 
thinking seems to be, The heck with 
subtlety — the economy and your 
stinking budget cuts be damned. 
Vendors and analysts want you to 
stand up and throw that Hail Mary 
pass right now and end the high-tech 
market’s long losing streak. 

For example, last week, Hewlett- 
Packard CEO Carly Fiorina pushed 
Comdex attendees to “get beyond 
the doom-and-gloom headlines,” 
and presumably, to hurry up and buy 
some technology in a bid to drive 
“progress.” Despite coming off a bet- 
ter-than-expected fourth quarter, 
HP is still announcing job cuts. 

Two weeks ago, Intel launched a 
campaign designed to “help” IT de- 
cision-makers understand how 
putting off desktop upgrades will 
overtax their budgets, degrade cor- 
porate productivity and imperil na- 
tional security efforts. Intel may well 
have some valid points, but the un- 
derlying message is clear: If IT de- 
partments don’t buy more PCs, then 
PC makers will suffer, as will Micro- 
soft and, in turn, Intel and so on. 


I can’t imagine the PC 
vendors and Microsoft 
not jumping on that train. 
Market researcher Gart- 
ner says PC shipments 
fell 4% last year and were 
down again for the first 
six months of this year. 
Prices dropped again last 
week. Microsoft mean- 
while is looking at a log- 
jam of new technology 
that it needs to move. 


spending. Look at the numbers. IDC 


| last week said the worldwide IT in- 
| dustry will shrink 2.3% in 2002, 

| making this year the worst ever for 
| high tech. 


The pressure is only going to 





build from here. Hopeful industry 
analysts are predicting a 6% to 7% 


| increase in IT budgets next year, 


and the line of folks waiting to ad- 
vise you on how to spend the extra 
dough is growing by the minute. You 
can probably expect a lot of guilt- 


tripping, scare tactics and appeals to | 


your patriotism and leadership. 
Well, leaders don’t capitulate. 


They make reasoned and strategic 


decisions based on their needs and 
resources. 
The days of indiscriminate buying 


| are over, and not just because of 


slashed budgets. The market today 
is duller and messier. There are few- 


| er must-buy applications. And in 
areas such as wireless LANs and 

| Web services where technology is 

| creating some excitement, the tech- 
| nical issues are turning buyers off. 


If vendors are smart, they'll focus 


| On just a couple of things, like build- 


ing more stable technology and pro- 


| viding advisory and support ser- 
There’s no question the | 
| industry has a lot riding on your 


vices designed to help smart IT 


| shops meet their goals. That has to 
| be your pushback while staying the 


course. Focus on what works for 


| your company. Don’t let would-be 
| business partners rush you. And 

| don’t throw the ball until you are 
| darn good and ready. D 
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Happy 
IT Boot 


Campers 


T’S TIME to consider 

camp; not next year’s sum- 

mer camp for the kids, but 
CIO boot camp as developed 


by Meta Group. 

For three and a half years, the IT 
consultancy has run 770 IT executives 
through its rigorous three-day course 
designed to delve into the tough topics 
of advancing IT services inside Global 
2,000 companies. 

But don’t mistake this venue as a 
place to patch tech skills — though 
there is some attention paid to topics 
such as .Net, J2EE, portals, business 
intelligence and security. Rather, this 
is a place for CIOs to intensely re- 
evaluate and recommit themselves to 
the twin challenges of 
transforming their or- 
ganizations through a 
vision founded on the 
strategic business 
promise of technology 
while executing on 
day-to-day operations. 

As corporate lead- 
ers, CIOs face unique 
hurdles in their own 
bureaucracies. Meta 
Group created the 


| boot camp to help. 


“You have to understand why you 
have the problems you have,” says 
Karen Rubenstrunk, executive vice 


president and director of Meta 


Group’s Executive Directions service. 
Rubenstrunk offers two pearls of 
wisdom about IT that underpin much 


| of the boot-camp experience: “There’s 
| business’s perception of its depen- 


dence on IT, and then there's the cred- 
ibility of the IT organization.” 

If IT is perceived only at the trans- 
action level (as provider of HR or sup- 
ply chain systems, for example), then 
that’s how it will be viewed when stra- 
tegic investments are being debated. 

If IT’s usefulness is simply connect- 
ed to project management expertise 
(like help desk work or change man- 
agement), there’s nary a hope of build- 
ing a deep, trust-filled relationship. 

Effective CIOs recognize the value 
of developing a relationship that 
moves from trust to respect to arrive 
at collaboration. And yet, according to 
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Meta, 70% of the Global 2,000 compa- 
nies haven’t reached a trust-based re- 
lationship with IT. 

“Given that most Global 2,000 com- 
panies don’t understand or maximize 
their IT investments, we believe CIOs 
must raise their corporate profile and 
become transformational leaders in 
formulating core business processes,” 
says Rubenstrunk. 

Lip service is paid to these concepts, 
but more often lines of business per- 
ceive IT at a basic level, crushing every 
effort to accomplish anything strategic. 

Targeting themes of business and IT 
alignment, human capital management 
and portfolio management (described 
by my colleague Thornton May in the 
Nov. ll issue [QuickLink 34110]) execu- 
tives at the boot camp learn to craft 
plans, initiatives and programs that re- 
dress egregious investments and poor 
communication. 

But even if you’re skeptical about the 
camp experience, there’s one lesson to 
take home: The best campers are those 
who know they don’t have all the an- 
swers. That’s why they go to camp. D 


DAVID MOSCHELLA 


Users Will 
Drive Tech’s 
Future 


ISTORICALLY, IT has 

been primarily a sup- 

plier-driven business. 
Leading IT vendors and en- 
trepreneurs have typically 
provided most of the energy and risk- 
taking the market has needed to move 
forward. Whether new devices or ap- 
plications were required, IT suppliers 
have generally set the overall direc- 
tion. Not surprisingly, they have 
reaped the bulk of the industry’s 
recognition and rewards. 

But today things are different. The 
barriers now holding back the IT mar- 
ket are overwhelmingly on the cus- 
tomer side. Whether the issue is on- 
line music, effective Internet advertis- 
ing, robust business exchanges, com- 
pelling e-learning experiences, ad- 
vanced government services or indus- 
try-specific standards, it’s IT cus- 
tomers that need to provide most of 
the necessary innovation, leadership 
and perseverance. 

That’s why the title of my upcoming 
book is Customer-Driven IT. I don’t 
mean this in the traditional mother- 


hood sense of the need for 
suppliers to be focused on 
their customers’ needs. That 
goes without saying. What 
I’m referring to is the fact 
that IT customers are now 
the principal source of new 
IT value creation. Indeed, 
the value that customers are 
creating for one another 
now exceeds the value cre- 
ated by even our most im- 
portant suppliers. In other 
words, customer activities 
are now the largest and 
most influential portion of the IT in- 
dustry value chain. 
Of course, customer leadership and 
risk-taking have always been essential 


| parts of the IT story. But typically, 


what one customer did with its main- 
frames, minicomputers and PCs didn’t 
really affect the use of another compa- 
ny’s systems, except perhaps as some 
sort of best-practices indicator of what 
should or shouldn’t be done. But with 
the growth of the Internet and e-com- 
merce, the value that IT customers 


create for one another has 
become the industry’s most 
important market dynamic. 
This change has signifi- 
cant implications for the 
IT forecasting process. It 
suggests that no amount of 
supplier product innova- 
tion — broadband, wire- 
less, Web services, Tablet 
PCs, nanotechnology or 
anything else — is likely to 
be sufficient to lift the 
market out of its current 
slump. Only high levels of 


| sustained customer innovation can 


generate the value and demand need- 
ed for a new cycle of growth and ex- 


| pansion. Thus, rather than relying on 


| traditional forecasting tools such as IT 


| customer spending surveys and sup- 
| plier sales momentum, we should be- 
| come more focused on assessing the 
| degree to which major new forms of 
| customer value are being created. 


Right now, it’s not a particularly en- 


| couraging picture. Given today’s eco- 





hardly surprising that many customers 
have narrowed their focus to areas of 
consolidation, direct cost-cutting and 
near-term supply chain efficiencies. 
Yet these steps alone won't lead to a 
strong market recovery. Our industry’s 


| history suggests that only major new 

| applications and usage can lead to sus- 
| tained market expansion. This type of 
| progress could easily take another 


year or more to emerge. 
The good news is that this same his- 


| tory reveals that every major cycle of 
| technology has had at least one period 
| of sustained and prosperous expansion, 


and therefore the best days of the Inter- 


| net almost certainly lie ahead. But un- 


| like previous eras, in this case it’s IT 
| customers who must provide the deci- 
| sive final push. It’s these early signs of 


industry-specific innovation and 


| change that will point the way toward 


| 


an eventual IT industry recovery. 9 
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More columnists and links to archives of previous 
columns are on our Web site 


nomic and security uncertainties, it’s | www.computerworld.com/columns 
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Clarifying P3P 


AM CONCERNED about a few 

things that aren’t entirely accu- 
rate in Jan Matlis’ short article on 
P3P [QuickLink 33484]. The article 
states, “None of the policies are 
legally enforceable.” It isn’t clear 
that this is true. In the U.S., the FTC 
has taken action against Web sites 
that don't follow their privacy poli- 
cies, accusing them of false and 
deceptive practices. A P3P policy 
may be treated in a similar way. We 
don't have any test cases yet, but 
there is reason to believe that com- 
panies that are caught with inaccu- 
rate P3P policies will be subject to 
legal action. Also, the article men- 
tions a $70 tool for preparing P3P 
policies, but there are also free 
tools that the article doesn’t men- 
tion. In addition, while the number 
of P3P-enabled Web sites is still 
small (but growing), it's much larg- 
er than your list. Finally, the state- 
ment that the European Union re- 
jected PSP in January 1998 is false. 
It was made in a paper published by 
EPIC, which has been quoted else- 
where. But the document that EPIC 
cites shows that although the EU 
criticized P3P and said it wasn't 
sufficient for privacy protection, it 
didn’t reject it or say that it couldn't 


| be part of a broader privacy-protec- 
tion framework. Indeed, several Eu- 
ropean data-protection authorities 
have praised the changes that have 
been made to P3P since 1998 and 
have endorsed P3P. 
Lorrie Faith Cranor 
Chairman, P3P Specification 
Working Group, Florham 
Park, NJ. 


| Simply Capable 
HE TECHNOLOGY DIRECTION 
discussed in the article “Ven- 
dors Try to Simplify J2EE” is dead 


right [QuickLink 33404]. Simplicity | 
is often mistaken for a lack of capa- | 
bility or sophistication, when in fact | 


the opposite may be true 
Frank Baker 


Laguna Beach, Calif. 


| Get Competitive 


N RESPONSE to Christopher 
| & Mauro’s letter in the Oct. 28 issue 
[QuickLink 33812]: Lester Thurow 
former dean of MIT's Alfred P. 


Sloan School of Management, said | 


| it better than | ever could. At a con- 

| ference | attended some years ago, 

| he said that if someone in a Third 

| World country can do what you do 
for a quarter of your salary, you are 





overpaid. | have observed com- 
plaints about offshore competition 
and H-1Bs in your publication for 
some time. Welcome to the real 
world, a world that manufacturing 
has had to face for generations 
Unless | miss my guess, Mauro 


keyed in his letter using a PC manu- 


factured in China, wearing clothes 
manufactured in India. He drives a 
Japanese car and listens to CDs 


manufactured in Mexico. He watch- 


es the news on his Chinese-manu- 
factured TV and thinks nothing of 
the fact Hathaway Shirt Co. (the 
last U.S. dress-shirt manufacturer) 
closed its doors in October 
Bottom line: Every one of us en- 
joys the benefits of offshore-manu- 
factured items but object when it 
impacts us directly. Life isn’t fair, 
Mr. Mauro; get competitive. 
Jim Villano 
Huntsville, Ala. 


IT's Obvious Value 


S| READ ARTICLES such as 

“ClOs Try New Ways to Demon- 
strate ITs Value” [QuickLink 
34100), | find it astounding that the 
notion oi technology being part of 
the business rather than just part of 
overhead still makes news. It nas 
been obvious for years that IT is a 


| 
| 
| 
| 


valuable business asset that can 
and must be leveraged to create 
business process, revenue and 
cost/expense advantages; that ClOs 
are most valued and valuable when 
they engage the business at a 
strategic level, offering new ideas to 
promote the goals of business lead- 
ers; and that successful IT depart- 
ments work hard on internal proc- 
esses to deliver what they promise 
on time and on budget. It is no sur 
prise that the CIO position has the 
shortest tenure of all CXO positions, 
according to several sources. Ad- 
hering to the above three observa- 
tions promotes both business value 
and personal positional longevity. 
Robert A. Kotch 

President, SIM Associates, 
Purdys, N-Y. 
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OPINION 


The Heat Is On 


DON’T KNOW whether you've noticed, but af- 
ter two niggardly years, vendors are getting 
restless. As 2002 stumbles toward a haggard 
close, the year isn’t the only thing your ven- 
dors, consultants and integrators want to see 
come to an end. They want you to open up your 
budget, and they want you to do it now. 
All of their wheedling, pleading and incentives 
haven’t worked their magic. Vendor stocks are close 


to rock bottom, sales 
cycles have slipped into 
an endless loop, and up- 
ward migrations have 
slowed to a trickle. IT 
suppliers and advisers 
have cut costs while try- 
ing to find new revenue 
streams. But to no avail. 

As a result, there ap- 
pears to be a new willing- 
ness to speak more blunt- 
ly to IT execs and to ex- 
ert more pressure. The 
thinking seems to be, The heck with 
subtlety — the economy and your 
stinking budget cuts be damned. 
Vendors and analysts want you to 
stand up and throw that Hail Mary 
pass right now and end the high-tech 
market's long losing streak. 

For example, last week, Hewlett- 
Packard CEO Carly Fiorina pushed 
Comdex attendees to “get beyond 
the doom-and-gloom headlines,” 
ind presumably, to hurry up and buy 
some technology in a bid to drive 
“progress.” Despite coming off a bet 
ter-than-expected fourth quarter, 
HP is still announcing job cuts. 

Two weeks ago, Intel launched a 
campaign designed to “help” IT de- 
cision-makers understand how 
putting off desktop upgrades will 
overtax their budgets, degrade cor 
porate productivity and imperil na- 
tional security efforts. Intel may well 
have some valid points, but the un 
derlying message is clear: If IT de- 
partments don’t buy more PCs, then 
PC makers will suffer, as will Micro- 
soft and, in turn, Intel and so on. 


I can’t imagine the PC 
vendors and Microsoft 
not jumping on that train. 
Market researcher Gart- 
ner says PC shipments 
fell 4% last year and were 
down again for the first 
six months of this year. 
Prices dropped again last 
week. Microsoft mean- 
while is looking at a log- 
jam of new technology 
that it needs to move. 

There’s no question the 

industry has a lot riding on your 
spending. Look at the numbers. IDC 
last week said the worldwide IT in- 
dustry will shrink 2.3% in 2002, 
making this year the worst ever for 
high tech. 


rhe pressure is only going to 


build from here. Hopeful industry 
analysts are predicting a 6% to 7% 
increase in IT budgets next year, 
and the line of folks waiting to ad- 
vise you on how to spend the extra 
dough is growing by the minute. You 
can probably expect a lot of guilt- 
tripping, scare tactics and appeals to 
your patriotism and leadership. 

Well, leaders don’t capitulate. 
They make reasoned and strategic 
decisions based on their needs and 
resources. 

The days of indiscriminate buying 
are over, and not just because of 
slashed budgets. The market today 
is duller and messier. There are few- 
er must-buy applications. And in 
areas such as wireless LANs and 
Web services where technology is 
creating some excitement, the tech- 
nical issues are turning buyers off. 

If vendors are smart, they'll focus 
on just a couple of things, like build- 
ing more stable technology and pro- 
viding advisory and support ser- 
vices designed to help smart IT 
shops meet their goals. That has to 
be your pushback while staying the 
course. Focus on what works for 
your company. Don’t let would-be 
business partners rush you. And 
don’t throw the ball until you are 
darn good and ready. D 
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Happy 
IT Boot 


Campers 


T’S TIME to consider 
camp; not next year’s sum- 
_mer camp for the kids, but 
CIO boot camp as developed 
by Meta Group. 

For three and a half years, the IT 
consultancy has run 770 IT executives 
through its rigorous three-day course 
designed to delve into the tough topics 
of advancing IT services inside Global 
2,000 companies. 

But don’t mistake this venue as a 
place to patch tech skills — though 
there is some attention paid to topics 
such as .Net, J2EE, portals, business 
intelligence and security. Rather, this 
is a place for CIOs to intensely re- 
evaluate and recommit themselves to 
the twin challenges of 
transforming their or- 
ganizations through a 
vision founded on the 
strategic business 
promise of technology 
while executing on 
day-to-day operations. 

As corporate lead- 
ers, CIOs face unique 
hurdles in their own 


PIMM Fox is a freelance 
writer in San Francisco. 
Contact him at 
pimmfox@pacbell.net. 


bureaucracies. Meta 
Group created the 
boot camp to help. 

“You have to understand why you 
have the problems you have,” says 
Karen Rubenstrunk, executive vice 
president and director of Meta 
Group’s Executive Directions service. 

Rubenstrunk offers two pearls of 
wisdom about IT that underpin much 
of the boot-camp experience: “There’s 
business’s perception of its depen- 
dence on IT, and then there's the cred- 
ibility of the IT organization.” 

If IT is perceived only at the trans- 
action level (as provider of HR or sup- 
ply chain systems, for example), then 
that’s how it will be viewed when stra 
tegic investments are being debated. 

If IT’s usefulness is simply connect 
ed to project management expertise 
(like help desk work or change man- 
agement), there’s nary a hope of build- 
ing a deep, trust-filled relationship. 

Effective ClOs recognize the value 
of developing a relationship that 
moves from trust to respect to arrive 
at collaboration. And yet, according to 





www.computerworld.com 


Meta, 70% of the Global 2,000 compa 
nies haven't reached a trust-based re- 
lationship with IT. 

“Given that most Global 2,000 com- 
panies don’t understand or maximize 
their IT investments, we believe CIOs 
must raise their corporate profile and 
become transformational leaders in 
formulating core business processes,” 
says Rubenstrunk. 

Lip service is paid to these concepts, 
but more often lines of business per- 
ceive IT at a basic level, crushing every 
effort to accomplish anything strategic. 

Targeting themes of business and IT 
alignment, human capital management 
and portfolio management (described 
by my colleague Thornton May in the 
Nov. 1] issue [QuickLink 34110]) execu- 
tives at the boot camp learn to craft 
plans, initiatives and programs that re- 
dress egregious investments and poor 
communication. 

But even if you're skeptical about the 
camp experience, there’s one lesson to 
take home: 
who know they don’t have all the an- 
swers. That’s why they go to camp. D 


The best campers are those 
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Future 


-ISTORICALLY, IT has 
been primarily a sup- 
plier-driven business. 

Leading IT vendors and en- 
trepreneurs have typically 
provided most of the energy and risk 
taking the market has needed to move 
forward. Whether new devices or ap 
plications were required, IT suppliers 
have generally set the overall direc 
tion. Not surprisingly, they have 
reaped the bulk of the industry's 
recognition and rewards. 

But today things are different. The 
barriers now holding back the IT mar- 
ket are overwhelmingly on the cus- 
Whether the issue is on 
Internet 


tomer side 
line music, effective advertis- 
ing, robust business exchanges, com- 
pelling e-learning experiences, ad- 
vanced government services or indus- 
try-specific standards, it’s IT cus 
tomers that need to provide most of 
the necessary innovation, leadership 
and perseverance. 

lhat’s why the title of my upcoming 
book is Customer-Driven IT. | don’t 


mean this in the traditional mother- 


hood sense of the need for 
suppliers to be focused on 
That 
goes without saying. What 


their customers’ needs. 


I'm referring to is the fact 
that IT customers are now 
the principal source of new 
IT 
the value that customers are 
creating for one another 


value creation. Indeed, 


now exceeds the value cre- 
ated by even our most im- 
portant suppliers. In other 


DAVID MOSCHELLA’s next 
book, Customer-Driven 
IT, will be published in 
January. Contact him at 


create for one another has 
become the industry’s most 
important market dynamic. 
This change has signifi- 
cant implications for the 
IT forecasting process. It 
suggests that no amount of 
supplier product innova- 
broadband, wire- 
Tablet 
PCs, nanotechnology or 
- is likely to 
be sufficient to lift the 


tion 
less, Web services, 


anything else 


words, customer activities 
are now the largest and 
most influential portion of the IT in 
dustry value chain. 

Of course, customer leadership and 
risk-taking have always been essential 
parts of the IT story. But typically, 
what one customer did with its main- 
frames, minicomputers and PCs didn’t 
really affect the use of another compa 
ny’s systems, except perhaps as some 
sort of best-practices indicator of what 
should or shouldn't be done. But with 
the growth of the Internet and e 
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traditional forecasting tools such as II 
customer spending surveys and sup- 
plier sales momentum, we should be- 
come more focused on assessing the 
degree to which major new forms of 
customer value are being created. 
Right now, it’s not a particularly en- 
couraging picture. Given today’s eco- 
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hardly surprising that many customers 


have narrowed their focus to areas of 


consolidation, direct cost-cutting and 


near-term supply chain efficiencies. 


Yet these steps alone won’t lead to a 
strong market recovery. Our industry's 
history suggests that only major new 
ipplications and usage can lead to sus 
tained market expansion. This type of 
progress could easily take another 
year or more to emerge 


The 


tory reveals that every major cycle of 


good news is that this same his 


technology has had at least one period 
of sustained and prosperous expansion, 
and therefore the best days of the Inter- 
net almost certainly lie ahead. But un 
like it’s IT 
customers who must provide the deci 


previous eras, in this case 
sive final push. It’s these early signs of 
industry-specific innovation and 
change that will point the way toward 
an eventual IT industry recovery. BD 
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Our post-relational database. 


It combines the best technologies 
in the database world. 


For your next generation of applications, 
move to the next generation of database technology: 
Caché, the post-relational database. 

What makes Caché “post-relational”? It provides 
developers three integrated data access options which 
can be used simultaneously on the same data: an 
advanced object database, high-performance SQL, 
and rich multidimensional access. 

Because Caché’s architecture is a multi- 
dimensional structure, applications built on it are 
massively scalable and lightning-fast. 

Plus, no mapping is required between object, 
relational, and multidimensional views of data. 
This means huge savings in both development and 
processing time. And, Caché-based applications 
don’t require frequent database administration or 
hardware and middleware upgrades. 


More than just a database system, Ca 
incorporates a powerful Web application develop- 
ment environment that dramatically reduces the 
time to build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at hundreds of the 
largest hospitals. Caché is so reliable, it’s the world’s 
leading database in healthcare — and it powers 
enterprise applications in financial services, 
government and many other sectors. 

We are InterSystems, a specialist in database 
technology for 25 years. We provide 24x7 support 


to four million users in 
‘ InterSystems » 


88 countries. Caché is LLL 
available for Windows, it CACHE 
OpenVMS, Linux and LL : 


major UNIX platforms. Make Applications Faster 


Download a fully-functional version of Caché or request it on CD for free at www.InterSystems.com/post-relational 


2002 InterSystems Corporation. All rights reserved. InterSystems Caché is a registered trademark of InterSystems Corporation. 





TECHNOLOGY 


CASE STUDY: 
Virtualize and Conquer | 
Conseco Finance is using virtualization 
technology to cut down Intel server | 
proliferation and costs. Now a single 
Intel box can be carved up into multiple | 
virtual servers to run individual 
| 


SECURITY MANAGER'S JOURNAL: 
Certificate Distribution 
Proves a Vexing Problem 


system in the world won’t work well 
without a secure key-distribution 
methodology. Page 36 


applications. Page 30° 


WHERE THE 
STANDARDS 
STAND 


The Web services standards 
glass is half full, claim vendors 
and standards groups, but can 

they support complex business 
processes? BY GARY H. ANTHES 


Security manager Vince Tuesday finds out 
that the best public-key infrastructure 


11.25.02 


FUTURE WATCH: 


IT to Fight Terrorism 


Former intelligence analyst David 


Holtzman (right) applauds some 
elements of the government’s 


strategy to use IT against terrorism. 


But he 


warns of unintended 


consequences of the he plan. Page 34 


Y THEIR VERY NATURE, 
Web services require 
strong standards for in- 
teroperability, security 
and reliability. Yet so far 
the standards are immature, and they 
aren’t yet adequate for the most so- 
phisticated business processes. 

Standards developers and IT ven- 
dors generally see the 
standards glass as half full, 
pointing out that many 
companies have already 
set up useful and workable Web ser- 
vices applications. But many users see 
it as half empty, saying more remains 
to be done before they would consider 
using mission-critical Web services 
applications. Some even question 
whether the functions contemplated 
by some of the standards can be auto- 
mated at all. 

Users also say they’re confused and 
worried about what they see as overlap 
and competition among IT vendors 
and standards bodies. 

Web services are a language-neutral, 
platform-independent way to loosely 
couple applications across an intranet, 
extranet or the Internet. They ex- 
change documents, transactions and 
remote procedure calls using Web- 
based protocols. 

Kelly Adams, director of client tech- 
nology at Deutsche Bank AG in New 
York, says Web services may at last de- 
liver on the promise of distributed, 
heterogeneous computing. “CORBA 
{Common Object Request Broker 
Architecture] was supposed to be the 
be-all and end-all, but it didn’t quite 
turn out that way,” he says. “But it 
looks like the sort of self-describing, 
easy interpretation nature of XML has 
opened up a lot of possibilities.” 


The Basics 


The most fundamental Web services 
standards are the following: 


= XML: The Extensible Markup Laneieln is 





| asimple, flexible text format derived 
| by the World Wide Web Consortium 
| (W3C) from the Standard Generalized 


Markup Language, a system for orga- 
nizing and tagging elements of a docu- 


| ment. The open XML standard is 

| emerging as the method of choice for 
| exchanging information among com- 
| puter systems. The W3C has also de- 


veloped specifications for 
XML schemas, which de- 
fine how markup tags 
should be interpreted, and 


, for XML namespaces, a way of naming 


XML document elements and attribut- 
es so they can be recognized by vari- 
ous kinds of software. 


S SOAP: The XML-based Simple Object 


Access Protocol began life at Microsoft 
| Corp. but is now maintained and de- 


veloped by the W3C. Often called a 
“message envelope,” it consists of 
three parts: an envelope that describes 
what is in a message and how to proc- 
ess it, rules for encoding data, and a 


| convention for representing remote 
procedure calls and renpomaen. 


| # WSDL: Originally sieliaiad by IBM 
| and Microsoft, the Web Services Descrip- 


tion Language describes Internet ser- 


| vices as a set of endpoints operating 


on messages containing either docu- 
ment-oriented or procedure-oriented 
information. It allows a Web service to 
describe its capabilities by defining 
Web services interfaces and describing 


| how to access them. The W3C owns 


the latest version of WSDL. 


} SUDDI: The Universal estien Discov- 


ery and Integration specification was de- 
veloped by IBM and Microsoft. A kind 
of digital Yellow Pages, it enables a 


| company to describe its business and 


services and discover other businesses 
that offer desired services. UDDI is 
now maintained by the Organization 
for the Advancement of Structured In- 
Continued on page 28 
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Linux® ready with self-managing features for every e-business. 


Intel-based / xSeries 

It’s an affordable and powerful 
combination of mainframe- 
inspired reliability and smart 
systems management tools 


UNIX”/ pSeries 

Highly available, highly affordable 
and highly coveted. The pSeries is 
the platform of choice for powerful 
UNIX and Linux solutions 


Midrange / iSeries” 
Brings @asy-to-deploy, plug and 
play e-business to your business 
Sophisticated technology that’s 

| easy to manage and Linux ready 


Mainframe / zSeries" 

Maximum reliability, maximum power, 
/. Designed for 

handle the 

e-businesses 





They optimized their supply chain with IBM @server iSeries. When it comes to supplying hotel chains and 
restaurants with fine china, no one wants to wait for service. So Churchill China consolidated their e-commerce 
operation onto a single iSeries. Today, they can dispatch orders within 24 hours with near-100% accuracy. For a 


uide on server consolidation, go to ibm.com/eserver/churchill ; : a 
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WEB SERVICES 
STANDARDS 


WS- 


Attachments 
“Business Process Modeling Language **Security Assertion Markup Language 


SOURCE: IBM 
Continued from page 25 


ca, Mass.-based standards group with 
both vendor and user members. 

These foundation specifications are 
relatively mature, says Tom Campisi, 
an architecture analyst at Japan-based 
Toyota Motor Corp. and communica- 
tions chairman at Standards for Tech- 
nology in Automobile Retail, an indus- 
try IT standards body in McLean, Va. 
“XML and SOAP have been around for 
a while, and they are stable enough for 
widespread use,” he says. 

The standards are adequate for ex- 
changing purchase orders between two 
companies, Campisi says. But, he adds, 
more work needs to be done to devel- 
op Web services standards for auto- 
matically accommodating business 
rules that accompany the exchange of 
purchase orders, such as the length of 
time a purchase order is to be valid, 
how to respond to open purchase or- 
ders over time and how to coordinate 
purchase order and invoice processing. 


Are They Practical? 


And some question the practicality of 
the goals underlying the development 
of some standards, especially UDDI, 
which is intended to facilitate automa- 
tion of the interactions that accompany 
processes such as purchasing. The 
skeptics say purchase transactions, ex- 
cept possibly the smallest and most 
routine, will always require human ac- 
tions such as contract negotiations. 

“It would be nice if your application 
could go out and read UDDI and make 
judgment calls based on it,” says 
Robert Wegener, national solutions di- 
rector at RCG Information Technology 
Inc. in Edison, N.J. “But I don’t think 


Standards Body Ownership 
| ETF 
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w3c OASIS Other 


BPEL4WS, 
BPML* 


WS- Transactions, 
WS-Coordination 


HTTP-R 


XML Encryption WS-Security 
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WSDL 

XMML-Schema «UDI 
SOAP 


| you'll see that for a long, long time.” 
formation Standards (OASIS), a Billeri- | 
little more than companies’ toll-free 


Most UDDI registries today contain 


telephone numbers, he says. 
A number of efforts are under way 
to address two broad areas in which 


| Web services standards are weak or in- 
| complete: security and the accommo- 
| dation and coordination of business 


process rules for multiple interacting 


| Web services. These specifications are 


to be layered on top of the core stan- 


| dards developed by the Reston, Va.- 


based Internet Engineering Task Force 


| (IETF) and the W3C. For example, 


IBM, Microsoft and VeriSign Inc. in 


| April proposed a set of security stan- 


dards under an umbrella called WS- 
Security, which is now at OASIS. 

The base WS-Security, which is built 
on top of SOAP, describes how to at- 
tach signature and encryption headers, 


| security tokens, and encryption certifi- 
| cates to SOAP messages. On top of that 


sits WS-Policy, which defines how to 


| express the capabilities and con- 


straints of security policies; WS-Trust, 


| which describes how to establish trust 
| relationships; and WS-Privacy, which 


defines how ‘Neb services state and 
implement privacy policies. Follow-on 


| WS-Security specifications will in- 
clude WS-Secure Conversion, which 


will describe how to manage and au- 


| thenticate message exchanges; WS- 





| 
| 


Federation, which will describe how to 
manage and broker trust relationships 
in heterogeneous environments; and 
WS-Authorization, which will describe 
how Web services manage authoriza- 
tion data and policies. 

In August, IBM, Microsoft and BEA 
Systems Inc. published specifications 
for creating and coordinating multiple 
business processes based on Web ser 
vices. The companies announced WS- 
Coordination and WS-Transaction, 
which both specify a way of handling 
multiple Web services interactions, re- 
gardless of the underlying computing 
infrastructure, and Business Process 
Execution Language for Web Services 
(BPEL4WS), a new language to de- 
scribe business processes. BPEL4WS 
describes the flow of tasks, the order 
in which they need to be performed, 
the type of data shared and how other 
partners are involved. The companies 
haven’t yet said which 
standards body they will 
submit these specifications 
to, says Bob Sutor, director 
of Web services strategy at 
IBM. 

Sutor says XML, SOAP, 
WSDL and UDDI consti- 
tute the first of three Web 
services standards phases, the connec- 
tion phase. The second phase will be 
the security phase, and the third will 
the the enterprise — business process 
or workflow — phase. “By the time we 
are done, there will be 20 to 30 stan- 
dards that we say are part of Web ser- 
vices,” he says. Asked if that isn’t a lot 
for developers and users to get their 
arms around, Sutor counters that all 
those standards are needed to provide 
the functions users demand. “We are 
roughly at Year 2.5 of a five-year 
process,” he adds. 


Building Blocks 

Building Web services specifications 
on top of each other in a building- 
block fashion gives application devel- 
opers and users a lot of flexibility, de- 
velopers say. “The idea is they should 
be relatively loosely coupled, so if you 


| have two applications doing simple in- 


formation exchange, you don’t have to 


| use much of the stack,” says Uttam 


Narsu, an XML and Web services ana- 


It would be nice if your application could 
go out and read UDDI and make 


| judgment calls based on it, but | don’t think 


you'll see that for a long, long time. 
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| ROBERT WEGENER, NATIONAL SOLUTIONS DIRECTOR AT RCG INFORMATION TECHNOLOGY INC 
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lyst at Giga Information Group Inc. in 
Cambridge, Mass. For example, he 
says, an internal, intranet Web service 
not involving confidential data might 
need little or no security. 

Regardless of the state of evolution 
of Web services standards, users must 
not neglect their own “standards” such 
as security policies, says Deutsche 
Bank’s Adams. He says he’s looking at 
products such as Mountain View, 
Calif.-based Westbridge Technology 
Inc.'s XML Message Server, whose 
“policy engine” can filter messages for 
compliance with security policies by 
Web service, service requester or a 
combination of the two. Adams says 
Web services security is now in the 
hands of individual application devel- 
opers at the bank but ultimately should 
go to a centralized infrastructure 
group. “One of our biggest problems 
internally is getting everyone on board 

using the same standards,” 


eraunapn errrrae = he says. 
STANDARD SETTERS A group likely to attract 


To find out more about the 
organizations that develop 
Web services standards, 
visit our Web site 


@ QuickLink 34475 
www.computerworld.com 


increasing interest from 
users is the Web Services 
Interoperability Organiza- 
tion (WS-D, which has tak- 
en it upon itself to stan- 
dardize the standards. 
“Our goal is to take specifications 


| developed by the standards organiza- 
tions and put them together with some 


implementation guidelines and best 
practices,” says Bob Cheng, co-chair- 
man of WS-I’s marketing and commu- 
nications committee and a marketing 
manager at Oracle Corp. “We want to 
make it easier for end-user companies 
to move forward with Web services.” 
“The WS-I has become the most im- 
portant Web services standards body 
for users,” Narsu says. “They are like 
someone with a very powerful search- 
light illuminating the dark areas of the 
standards arena. It creates a baseline 
for users to just get started without 
worrying about the fact that all this 
stuff is going on with security and 


| transactions and business process.” 


You should consider alternatives to 
Web services standards that are in- 


| complete or changing, says RCG’s We- 


gener. For example, you could encrypt 
a SOAP message using Secure Sockets 
Layer technology instead of the more 
efficient and flexible — but less mature 
— encryption specified by the W3C. 

And standards enthusiasts say users 
should actively participate in stan- 
dards groups. “Users need to be a little 
more involved in the infrastructure 
and interoperability standards,” Narsu 
says, “because ultimately it’s their pay- 
load that’s being carried.” D 
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Apparently the word is out everywhere. BrightStor” ARCserve Backup is among the most reliable and widely used 


backup solutions in the world. In fact, hundreds of thousands of people rely on BrightStor ARCserve Backup 
technology to protect their critical servers. Now we've created BrightStor” ARCserve Backup v9, the most advanced 
version ever. As part of the BrightStor™ line of storage management solutions, BrightStor ARCserve Backup v9 is amazingly powerful yet 
one of the simplest to use and easiest to install solutions out there. In fact, most users can perform their first backup within 20 minutes 


of start-up. And that means it’s the perfect backup software choice for, well, just about everyone 
mtn 
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TECHNOLOGY 


CONSECO 
STOPS SERVER 
PROLIFERATION 

VIRTUALLY 


The finance corporation cut 
costs and the number of Intel boxes 
with virtualization technology. 
BY JAIKUMAR VIJAYAN 
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NTIL RECENTLY, Conseco Fi- 

nance Corp., like many other 

organizations, was struggling to 

find a way to control the rapid 
proliferation of small Intel-based 
servers across the company. 

The systems, which were be- 
ing purchased at the rate of 
about one per week, were being 
used to run a variety of very small 
Windows-based applications, such as 
domain controllers and encryption and 
antivirus services. 

In many cases, the Intel servers that 
were being purchased were severely 
underutilized because the applications 
required only a fraction of the avail- 
able resources, says Rod Lucero, chief 
IT architect at St. Paul, Minn.-based 
Conseco Finance. 

But because of the technical chal- 
lenges involved in running more than 
one application on a single instance of 
the Windows operating system, Con- 
seco had to buy individual servers for 
each new application, says Lucero. 

“We really wanted to find a technol- 
ogy that would not require us to go out 
and buy little pizza boxes every week,” 
Lucero says. So nine months ago, Con- 
seco started using virtualization tech- 
nology from VMware Inc. in Palo Alto, 
Calif. VMware sells software-based 
partitioning products that allow users 
to take a single Intel box and carve it 
up into multiple smaller “virtual” 
servers, each of which can run a sepa- 
rate Windows or Linux application. 

For instance, a four-processor Intel 


eeee 
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“host” box can be sliced up into 12 vir- 


| tual servers for running 12 separate ap- 





plications. The partitions are com- 
pletely isolated from one another and 
can run their own copies of 
“guest” server operating sys- 
tems such as Microsoft Corp.’s 
Windows 2000 Server and Ad- 
vanced Server, as well as Red 
Hat Inc.’s Linux distribution. 
VMware’s software allows adminis- 
trators to allocate processing power, 
memory and disk space as appropriate 
to the applications running inside each 


virtual partition. To an application, 
each virtual machine looks exactly like 
a physical system. 

“The virtual machine is stored as a 
single file inside the host operating 
system,” says Diane Greene, president 
of VMware. “When the guest operating 
system is writing to its disk, it is actu- 
ally writing inside a file” on the host 
system, she explains. 

Such capabilities have allowed Con- 
seco to rein in Wintel server prolifera- 
tion and provided for much better re- 
source utilization, says Lucero. “We 
use it as a corporate standard for Win- 
dows 2000 and NT servers,” he says. 

“The only place where we would not 
use virtual servers would be for appli- 
| cations that have an extremely high 
processing requirement or absolutely 
need more than one processor to run,” 
Lucero says. That’s because VMware’s 
software currently allows a maximum 
of only one processor to be dedicated 
to an application running inside a vir- 
tual partition. 

So far, Conseco has created 60 virtu- 
al servers on 14 four-processor Intel 
machines. Each of the Intel boxes sup- 
ports 8GB of memory and runs a copy 
of VMware's GSX software running on 
Red Hat Linux 7.2. Conseco has created 
an average of four virtual servers on 
each host machine. The company 
plans to create 135 more virtual servers 
on five IBM x440, eight-processor Intel 
servers, each with 32GB of memory 
and running VMware’s more robust 
ESX technology. 

Using virtual machines has allowed 
Conseco to save substantially on hard- 
ware, administration, backup, monitor- 





WHERE CONSECO IS HEADING 


Conseco Finance plans to use VMware’s ESX technology to create 135 
virtual servers on four Intel-based boxes from IBM. 
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The IBM xSeries 440 boxes are as- 
signed a 27B virtual disk on DataCore’s 
SANsymphony product. This network- 
managed volume is used for allocating 
virtual disk space to each of the virtual 
servers running inside the xSeries 440 
boxes. The actual physical storage 
comes from EMC storage servers. 


Each of the IBMx440 servers will havea minimum of 
eight VMware ESX -enabled virtual servers running inside 
them. The servers will be used to run applications such 
as SQL Server, Citrix and PGP encryption services. 
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ing and office space, Lucero says. Con- 
seco still pays license fees of $600 an- 
nually for each copy of the Windows 
server operating system running inside 
each virtual machine. And the four- 
and eight-processor boxes it’s using to 
host virtual machines cost consider- 
ably more upfront than the one- 
processor boxes it had used. 


Significant Savings 

But the company has been able to con- 
solidate and reduce most of its other 
costs. For instance, Conseco no longer 
buys separate copies of software for 
backing up each individual server — 
instead, it buys just one license for 
backing up the entire host box. Con 
seco has also been able to take the 
same approach with its systems man- 
agement, network connectivity and 
server maintenance costs. 

As a result, the total ownership cost 
of running 32 servers in a virtual ma- 
chine environment is just $142,000 an- 
nually, compared with the $332,000 it 
would have cost to run them individu- 
ally, Lucero says. 

Another user who has turned to vir- 
tualization touts its value in a different 
situation. Since the virtual machines 
exist simply as disk files on the host 
machines, it’s much easier to copy or 
replicate them for disaster recovery 
functions, says Carmine Iannace, man- 
ager of IT architecture at Welch Foods 
Inc. in Concord, Mass. “By virtualizing 
the hardware, the guest servers can op- 
erate on any box,” he says. 

But there are a few issues to keep in 
mind, Lucero says. To get optimum 
benefit from virtualizing your servers, 
it makes sense to virtualize your stor- 
age as well, Lucero says. Conseco is us- 
ing storage virtualization software 
called SANsymphony from DataCore 
Software Corp. in Fort Lauderdale, Fla. 

The software has allowed Conseco 
to create a networked storage pool 
from which it allocates an average of 
4GB of virtual disk space to each virtu- 
al server. The approach has resulted in 
much more efficient use of storage re- 
sources, Lucero says. “It is also impor- 
tant that you really understand the 
memory and performance characteris- 
tics of the applications that you run on 
your virtual servers” to get the best 
performance, he says. 

Running multiple applications on a 
single box also heightens the danger of 
the hardware becoming a single point 
of failure, says Tony Iams, an analyst at 
D.H. Brown Associates Inc. in Port 
Chester, N-Y. So it’s a good idea to cre- 
ate online backups using VMware’s 
snapshot functionality, he adds. D 





What day is it? Sunday? 


I'm only 9 hours into a 32 hour backup. 


That's just too long. 


it’s up to me to shorten it. 


For good. 


Save the day. 


There are plenty of ways to shorten backup windows. And StorageTek is just the company to find the one that’s right 
for you. Maybe it’s BladeStore as part of disk-to-disk backup, or an L-Series automated tape library with the industry's 


fastest tape drive - the T9940B. Whatever the solution, we think you deserve a day of rest. Learn more about this 


GladeStore story and other ways we can help you at www.savetheday.com ce » STORAGETEK’ Save the Day 
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Switching 
On XML 


Outlook: XML data routers can acceler- 
ate and prioritize Web services traffic 
internally or across the Internet, but the 
role such devices will ultimately play in 
the Web services arena remains unclear. 


By Matt Hamblen 
S XML-BASED Web 
services continue to 
evolve, a new cate- 
gory of XML-aware 
data routers is 
emerging that could smooth 
out Web services 
transactions. These 
devices act as in- 
termediaries at the 
network edge, 
reading, interpret- 
ing and acting upon embed- 
ded XML content in order to 
provide services such as prior- 
ity routing, filtering, accelera- 
tion, authentication and en- 
cryption. 
By enhancing data move- 
ment between Web-based ap- 


plications and databases, these | 
| . 
| cation protocols. 


devices may help companies 
communicate more effectively 
with partners, employees and 
customers. 

These XML routers consist 
of a group of related devices 
variously described as appli- 


@ IMPROVING WEB SERVICES 


Moving Data 


XML routers interpret and re- 
spond to XML tags embedded in 
data packets flowing between 
Web services application 
servers. They can facilitate data 
sharing through services such as 
priority routing and acceleration 
or by adding security functions 
such as authentication or encryp 
tion. The devices can facilitate 
data sharing both inside and out- 
side of a corporate firewall. 


| 
etn 


EMERGING 
TECHNOLOGIES 


| cation data routers (ADR), 


XML acceleration appliances 


| or XML switches. The first 
| such devices appeared in May. 


About 10 start-ups are offering 
or developing XML routers, 
and analysts say 
interest is building 
among the big 
router vendors. 

Greg Howard, 
principal analyst 
at The HTRC Group LLC in 


| San Andreas, Calif., defines 

| XML routing as one function 

| of ADR. These devices per- 

| form routing at the application 
| layer and can incorporate 

| switching based on XML con- 
| tent, but they may also sup- 


port other database and appli- 


The goal, he says, is to inter- 
pret XML content to enhance 


| security and provide “content- 
| aware” switching and acceler- 
ation services. ADRs can auto- 
| mate updates between differ- 


Structured 
enterprise data 


Ew . 


Unstructured 
enterprise data 
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XML Data 
Routers 


yey eter Fb 
ized devices that inspect 
network packets, interpret 
XML content and act upon 
that data to provide ser- 
vices such as priority rout- 
ing, authentication or ac- 
celeration. 


They can speed Web 
aU eee eat ee Ue) 
offload some processing 
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Devices start at 
Pl esto OM OOM Tem ee 
available only from start- 
ups; major switch and ap- 
pliance vendors have yet to 
enter the market. 


| ent corporate databases when 


a user makes a transaction, 
Howard says. 

Hemscott PLC in London is 
beta-testing Cambridge, 
Mass.-based DataPower Tech- 
nology Inc.’s XA35 XML Ac- 
celerator to speed database 
transactions. 

The financial information 
provider posts news about 
large European companies in 


| an Oracle database for Web 


distribution. Using the XA35, 


it has reduced the time it takes | 
| to make data conversions to 
| XML from about 25 seconds to | 
| tor that converts requests to an 
| XML schema based on a given 
| database and then retrieving 

| and returning information in 

| the requesting format. 


one second, says Stephen 
Roche, Hemscott’s chief tech- 


| nology officer. 


3Com Corp. subsidiary 
CommWorks Corp. in Rolling 
Meadows, IIl., uses an XPE 











2000 intelligent XML switch 
from Sarvega Inc. to automate 
customer support and ulti- 
mately reduce costs. The 
switch replaced the manual 
work and custom develop- 
ment necessary to process 
customer trouble reports, says 
Chandru Bolaki, technical di- 
rector at CommWorks. 

Support staffers used to 
process hundreds of outgoing 
e-mail and phone messages 
every day. The reports can 
now be transmitted automati- 
cally by voice, Short Messag- 
ing Service or e-mail. 


Setting Priorities 
John Chirapurath, co-founder 
and vice president of market- 
ing at Burr Ridge, Ill.-based 
Sarvega, says the XPE switch 
can prioritize XML data to 
help give more vital transac- 
tions greater priority. 

ADRs can be used in any or- 


| ganization that’s deploying 
| XML-based applications, 


whether for Web commerce or 


| internal needs, says Mark 

| Seery, an analyst at RHK Inc. 
| in South San Francisco, Calif. 
| Heavy-duty transactions such 
| as airline booking or enter- 


prise resource planning would 


| be good candidates, he says. 


Chirapurath says he has 


| seen interest in the financial 
| services, manufacturing and 
| health care sectors. 


Howard says an ADR can 


| work as an application layer 


proxy, functioning as a transla- 


Howard predicts that ADR 


| . - . 
will become more function- 


specific, catering to the needs 
of, say, human resources or 


| other areas. 


Seery says he expects the 


| technology to be incorporated 


into existing load balancers. 


| And in a little more than a 
| year, he says, a new generation 
| of ADRs that use programma- 


ble application-specific inte- 
grated circuits will arrive, po- 


| tentially lowering costs. 


At $50,000 and up, the de- 
vices currently represent a 
significant IT investment. 


| Nonetheless, the ADR market 


| 





www.computerworld.com 


PRODUCT PIPELINE 


Start-ups 
Drive XML 
Router Market 


All of the vendors develop- 
ing XML switches today are 
start-ups, and only a few of 
them are shipping products. 
They include the following: 


SARVEGA INC. 

Burr Ridge, lil. 
www.sarvega.com 

= XPE 2000 Switch: 


DATAPOWER 
TECHNOLOGY INC. 
Cambridge, Mass. 
www.datapower.com 
XA35 XML 
Accelerator: 


METAPA INC. 
Los Angeles 
www.metapa.com 
M8 Analytics 
Router: 
M12 Gateway 
Router: 


Vendors with security-relat- 
ed offerings include Forum 
Systems Inc. in Sandy, 
Utah, and Hitachi Comput- 
er Products (America) 
Inc. in Norman, Okla. 

Other vendors have re- 
search and development 
projects under way but 
haven't announced any 
products, says HTRC Group 
analyst Greg Howard. 

Vendors to watch include 
Bang Networks Inc. in San 
Francisco; Flamenco Net- 
works Inc. in Alpharetta, 
Ga.; Grand Central Com- 
munications Inc. in San 
Francisco; Kenamea Inc. in 
San Francisco; KnowNow 
Inc. in Sunnyvale, Calif; 
Slam Dunk Networks Inc. 
in Redwood Shores, Calif.; 
and Swingtide Inc. in 
Portsmouth, N.H. 


could grow quite large, says 
Howard. But at this stage, says 
Seery, it’s too early to tell. D 


DATA ROUTER RULES 
HTRC analyst Greg Howard explains the 
business value of XML data routers: 


QuickLink 33471 
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Bluefin 


DEFINITION 


Bluefin is the project name for 

a new, open, vendor-neutral 
application programming inter- 
face for discovering, monitor- 
ing and managing devices ona 
SAN. It’s an object-oriented 
messaging interface specifica- 
tion that links distributed man- 
agement applications with 
device management support. 


BY TOMMY PETERSON 
WITHOUT A WAY to put to- 
gether multivendor storage 
components and manage them | 
effectively, much of the value | 
proposition of storage-area 
networks (SAN) is moot 
Users are either 
shackled to one sell- 
er’s technology or 

face an expensive, la- 


isting standards: the 


| the Web-Based Enterprise 
ene interface. 


dardized way to de- 


mature, however, since Bluefin 
is a consolidation of and an in- 
cremental step beyond two ex- | 
Common 
Information Model (CIM) and 


object model — a stan- 


| 





vides the vocabulary of SAN 
management, Bluefin gives 
that vocabulary grammatical 
structure. That is, it standard- 
izes the way the components 
communicate with one anoth- 
er and perform key functions. 
Bluefin provides rules for 


three crucial services: device 


discovery (when a Bluefin- 
compliant product is plugged 
into a SAN, it announces itself 
and its capabilities to other 
SAN components); security 


against unauthorized reconfig- | 


uration of the SAN; and lock- 
ing, which keeps various man- 
agement applications from in- 
terfering with one another. 

A key feature of Bluefin is its 
two deployment models. In the 
first, a Bluefin agent is embed 
ded into a Bluefin-compliant 
storage device. In the second, 


the agent sits on a proxy server | 


that intermediates between a 


| management application and a 
| storage device that doesn’t 


support Bluefin. The second 
model is crucial because it al- 
lows Bluefin to support legacy 


| storage installations 


| Less Chaos 


Bluefin advocates say the 
tocol would bring order to the 
now-chaotic process of SAN 
management in which each 


pro- 


| storage protocol and transport 


| lems with the reliability of the 


| performs as advertised, the 
| benefit to users could be im- 
| mense. But the highly compet- 


| the protocol may have more to 
| gain. Bluefin should shrink the 


| agement applications and 

| make it possible for vendors 

| to create the kind of central- 

| ized, streamlined management 
| products SAN users have been 


SAN Management Environment 


Bluefin enables the creation of a storage management environment, making 
all the logical and physical storage entities 


tions through its interfaces 


s accessible to management applica 


Storage 
3 mica Container 


Information 
Management — 


® Filesystem 
= Database 
system 


Data Movers 


® Backup system 

8 Hierarchical 
storage 
management 


® Mecia 
management 

® Volume 
management 


& Performance 

8 Capacity 
planning 

® Resource 
allocation 


Bluefin SAN management interface 


Physical entities (Disk drive, switch, array, hub, loop, fabric, others) 


Logical entities (RAID set, LUN, media set, tape volume, zone, others) 


operability with a jaundiced 

| eye, but the specification cer- 
tainly has the backing of the 
heavy hitters. The group of 
vendors that spawned Bluefin 

| includes BMC Software Inc., 

| Brocade Communications Sys- 
tems Inc., Computer Associ- 

' ates International Inc., Dell 
Computer Corp., EMC Corp., 
Emulex Corp., Gadzoox Net- 
works Inc., Hewlett-Packard 

| Co., Hitachi Data Systems 
Corp., IBM, JNI Corp., Prisa 
Networks Inc., QLogic Corp., 
Storage Technology Corp., 
Sun Microsystems Inc. and 


software and devices. 
If Bluefin is adopted and 


itive storage vendors that 


backed the development of 


time to market of SAN man- 


asking for. Vendors and the 


CIM is central to 
me rm 


Bluefin, providing an 


technology (such as Fibre 
Channel or IP) exports its 
own unique object model. The 
array of management inter- 
faces in any single SAN can 
lead to a parallel inconsisten- 
cy in the discovery and securi- 
ty features, 


scribe the physical and 

logical components of 

the storage network. 
Each component has its own 

| CIM profile, whether it’s a 
disk array, a Fibre Channel 
fabric device or any other part 
of the network. If CIM pro- 


borious process in or- 
der to jury-rig man- 
agement applications 
that work across all compo- 
nents of their SANs. 

But now, slowly swimming 
through the murky waters of 
the standards adoption proc- 
ess, comes Bluefin, a storage 
management protocol drafted 
by a group of 16 vendors and 
presented for review in May 
to the Storage Networking In- 
dustry Association (SNIA) in 
Mountain View, Calif. Late last 
month, the SNIA launched its 
Storage Management Initia- 
tive (SMI) aimed at fostering 
the full development and 
adoption of Bluefin and reiat- 
ed specifications. 

According to the SNIA, 
Bluefin will provide the key to 
making disparate storage hard- | 
ware and software work to- 
gether and thereby revolution- 
ize networked data storage. 
Talk of revolution may be pre- 


SNIA are betting that Bluefin 
will dramatically boost the 
market for SAN technology. 

| Veterans of other IT stan- 

| dards wars may view the 

emergence of Bluefin and its 

| promise of multivendor inter- 


T 
| 
| 


as well as prob- 


What Do Corporate Users Want? 


The SNIA commissioned a survey of Fortune 1,000 companies by The InfoPro documenting the storage needs of 
corporate users. Multiple responses were allowed. Results are represented in the chart below. 


ee 
ee ee 
Ree 

EE 8° 

Performance improvements a 

Standards support az 

Virtualization across multiple vendors EE 6% 

Ge 4, 

EE 3% 

Ge 3% 

Mi 2% 


ciara es me 


Better management tools 
Better interoperabitity 

New technologies 

Cost or price improvements 


Reliability improvements 
Improved scalability or flexibility 
Improved services 

Vertical application integration 


a nee nae 


| Veritas Software Corp. The 
; cooperation of vendors in this 


| difficulties they face 


ferociously competitive space 
signals that they know users 
are frustrated by the confu- 
sion in the industry and the 
managing 


| their costly storage networks. 


The need for a standard in- 


| terface is clear, and Bluefin is 
| the choice to fill that need. But 
| timing is still a question. 


When the SNIA launched 


| its SMI earlier this fall, its stat- 
| ed goal was, “All storage man- 

| aged by the SMI Interface 

| [Bluefin] in 2005.” But with 

| not a single Bluefin product 


| 
| 
| 
| 
| 
| 
| 
| 
| 
| 


on the market yet, it remains 


| to be seen if that ambitious 


schedule can be met. D 

Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 
ideas to quickstudy@ computerworld.com. 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 
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[to Hight 
‘lerrorism 


Will it work, or will it backfire? 
By Gary H. Anthes 


Who Is He? 
Futurist, writer and 
businessman, Holtzman is an 
adjunct professor of mark 
ing at American University in 
Washington. He's a former 
Defense Department intelli 
gence analyst and a former 
chief technology officer at 
Network Solutions Inc. 


| intelligence, or ‘data profiling’ 





David Holtzman says that since Sept. ll, 
2001, the U.S. government has come to 
view IT as a key weapon in its war on 
terrorism. “The administration is cur- 
rently at work planning a new informa- 
tion system — one capable of anticipat- 
ing terrorist acts using artificial 


technologies,” he says. Some ele- 
ments of the system would be 
beneficial, but some go too far 
and wouldn't be effective in any 
case, Holtzman argues. Building the sys- 
tem would require these actions, he says: 
1. Connecting government databases 
containing information from customs, 
immigration, law enforcement, mili- 





FUTURE 
WATCH 


| tary and tax files, state and local 


records, political contribution lists, 


and education and voting records. 


Building software that bridges govern- 


| ment and commercial databases. 


2. Linking government and commer- 


| cial databases, using Social Security 
| numbers. Eventually mandating that all 
| commercial databases have a field for 


Social Security numbers. 

3. Connecting the system to millions 
of real-time sensors for up-to-the- 
minute threat assessment. Sensors in- 


| clude chemical and radiation detectors 


and cameras in public places such as 
storefronts, highways and airports. 

4. Requiring that everyone carry a 
national ID card, and tying it into a 
database of biometric information 
such as fingerprints, retinal scans, face 
measurements, blood type and DNA. 

5. Tracking phone calls, e-mails and 
the like and generating diagrams of 
social groupings using “traffic analy- 
sis” tools. Predicting behavior based 
on social interactions and “networks” 
of individuals who communicate with 
one another within a group. 

6. Building technology that will 
“guess” what people are thinking and 
what they might do, using rules-based 
analyses similar to those used by credit 
scoring systems. 

7. Giving people a secret “threat 
score” or “loyalty rating” using tech- 
nology similar to that used by credit 


card companies. 


| Holtzman talked with Computerworld 


about the role of IT in fighting terrorism: 


Can IT make a difference in the war on ter- 
rorism? What IT is really good at is 
picking up an information trail for 
prosecution. Intelligence agencies 


| were able to piece together a lot of the 


terrorists’ comings and goings a day or 
two after 9/11 by using IT. But I can’t 
imagine what could have been done 
through IT to stop 9/11. 


Yet you say the government is planning a 
major deployment of IT in the war against 
terrorism. ls it on the right track? Deploy- 
ing sensors? Absolutely — radiation 
detection, biological warfare detection. 
It seems reasonable that public 
places and public transporta- 
tion hubs would be under sur- 
veillance. In a few years, solid- 
state cameras will cost $1 or so, 
GPS devices will be on a chip, 
and surveillance will be affordable by 
anyone. Collecting sensor data doesn’t 
give me much heartburn, but I have a 
lot more heartburn with the interpre- 
tation of the data. They are going to 
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have to make guesses, with a lot of a 


| priori biased judgment in there. 


What's the alternative to these IT-based 


| measures? One $70,000 human agent at 
| the CIA to penetrate al-Qaeda would 


be more effective than $1 billion of IT. 


Are these IT measures a threat to privacy? 


| The heterogeneity of data today creates 


natural obstacles. But when you start 
federating all this stuff on Social Secu- 


| rity number, that means anyone in the 
| government can have access to enor- 
| mous amounts of data on an individual. 


I worry about the law of unintended 


| consequences. For example, the IRS re- 


fund system was twisted around two 


| decades ago to go after “deadbeat dads” 


and violators of student loans. That was 
not intended when they built it. 


Scott McNealy of Sun Microsystems said, 
“You have zero privacy — get over it.” Do you 
agree? Companies, the government and 
individuals are pretty much going to 
know whatever they want to know 
about you. The question is, What are 
they going to do with it? The idea that 
you can do anything and nobody knows 


| it is really anonymity, and that’s dead. 


What are the issues for companies? 
Enough companies are going to do 
things that people find dubious that it 
will result in very narrow but deep leg- 
islation stopping certain activities, and 


that will hamstring U.S. businesses. 


How can the corporate IT manager help 
head this off? I'd like to see the IT 
people start this discussion, but that 


| doesn’t seem to be happening. There’s 


this idea that if you can do something, 


| it’s de facto OK to do it. Technology 


professionals don’t think about the 
consequences of this stuff. I’m not say- 
ing they shouldn't build something like 
a CRM system, but there’s more than 
one way to build something. 


Wouldn't these government IT measures 
be OK if accompanied by regulations, such 
as we have for wiretapping? Guidelines 
that exist today deal with 100-year-old 
technology. So postal mail and tele- 
phone calls are protected, but e-mail 
and instant messaging are not. You'll 
never catch up. Technology moves 
too fast. D 


SURVEILLANCE SYSTEMS PLANS 


For a summary of what the government says about its 
plans to build a system like the one Holtzman is worried 
about, visit our Web site: 
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The new IBM @server BladeCenter.” It’s a sense and respond world. You need 
an infrastructure that is flexible, on demand. Now you can remotely deploy new 
servers in minutes, rather than hours or days! Inside the new BladeCenter, individual 
blade servers can be hot-swapped in and out of a single chassis? On demand. And 
because BladeCenter uses Intel® Xeon™ processor-based blades, you get flexibility 
without sacrificing the performance you need for your data center. The result is an 
incredibly dynamic systems environment, one that lets you scale out to add capacity, 
reconfigure on the fly and create an infrastructure with no single point of failure. 
To get an interactive demo on BladeCenter, or for special financing information, 
visit ibm.com/eserver/biadecenter or call 1 800 426-7777 and mention priority 


code 102AX004. (@business on demand 
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Certificate Distribution 
Proves a Vexing Problem 


Just determining how to securely dissemi- 
nate keys for a new PKI system proves to be 
a challenge in itself. By Vince Tuesday 


M AT THE BEGINNING of a 
project to rework my com- 
pany’s homegrown public- 
key infrastructure (PKI). 
Specifically, we want a system 
that will let us reissue keys as 
they expire without inflicting 
a lot of pain on users and ad- 
ministrators. We're looking at 
several different products. But 
even when we find the right 
certificate authority, we'll still 
need a way to get the 
right keys to the right 
users. This week, I’m 
working on coming 
up with a better cer- 
tificate-delivery 
mechanism. 


Just E-Mail It 


Historically, we’ve e-mailed 
certificates to users in an en- 
crypted attachment. But now, 
with everyone worried about 
e-mail-borne viruses and 
worms, we have to send these 
attachments through firewalls, 
and that’s very difficult. We 
need to secure e-mail stan- 
dards or use another method. 

We decided to evaluate sev- 
eral different approaches and 
set up conference calls with 
vendors to discuss product 
details. 

We had a useful discussion 
with one firm that offered a 
secure e-mail package. But we 
decided against this — or any 
vendor’s — secure e-mail 
product. Why? Some of our 
customers use Secure Multi- 
purpose Internet Mail Exten- 
sions, some use Pretty Good 
Privacy, and the rest use horri- 
ble, proprietary bolt-ons. We 
don’t want to be the ones to 
synchronize it all. 

As we evaluated possible 
distribution methods, it be- 
came clear that a Windows- 
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| based protected Web server 

was the right answer. With it, 

| our users could authenticate 

| to the Web site using a pass- 

phrase that we mail to them, 

| and then our Secure Sockets 

| Layer-enabled Web site would 

| let them download their cer- 

| tificates safely and easily. 

| We bought a few applica- 

| tions that let us check who the 

| users are and securely deliver 

1 the certificates to 

them. Unfortunately, 

these applications 

require a Windows 

2000 system run- 

ning Microsoft’s In- 

ternet Information 

| Server (IIS) and a 

| SQL Server back end, and 

| we don’t normally support 

| those in our externally facing 

| infrastructure. We certainly 

| don’t have a Windows support 

| team to ensure that these 

| servers are kept up to date and 
monitored. 

This opened up another 

| problem: Given the sheer 
number of IIS Web servers out 
there, we knew our servers 

| would be the target of many 

| attacks. There are many 

| known buffer overflow prob- 
lems, and we expect a contin- 

| uous stream of patches for 

| new and old vulnerabilities. 


| 

| It became clear 

| that a Windows- 

| _ based protected 

| Web server was the 
| right answer. 


| vulnerability is discovered and | 


| wide open in the meantime. 


attacks against our devices, to 


| tempted attacks. 


| incorrect instructions so that, 


| flow attack can work. It adds 
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To implement this system 
successfully and at a reason- 
able cost, we needed to find a 
way to protect ourselves from 
attacks during the time after a 


before our administrators are 
able to roll out patches — 
without leaving ourselves 


The best way for us to 
do this was to move from in- 
trusion-detection software, 
which warns administrators of 


intrusion-prevention software, 
which automatically blocks at- 


We ended up using Enter- 
cept Security Technologies 
Inc.’s Web Server Edition soft- 
ware. This tool from San Jose- 
based Entercept acts as a gate- 
keeper to the Windows 2000 
application programming in- 
terface/kernel and filters and 
monitors requests. It automat- 
ically blocks attempts to carry 


for example, no buffer over- 


to Web server processor over- 
head by a few percentage 
points, but compared with the 
potential cost of administra- 
tive time spent responding to 
incidents, the extra hardware 
costs to support this overhead 
were tiny. 


Reasons to Worry 


Of course, not even the most 
impressive protection layers 
can eliminate every security 
problem. We might be protect- 
ed from buffer overflows and 
common worms, but you can 
always count on programming 
errors to leave security holes. 
For example, an outside 
hosting and design agency 
manages our graduate recruit- 
ment site. We’ve encouraged 
the agency in the past to get 
their servers built to our stan- 
dards, but part of the benefit 





of outsourcing is that we 


| shouldn’t have to worry about 


their security. Worry we did, 
though, when a graduate 
called to tell us he was playing 
with the forms on the site “and 
something funny happened.” 
At this point, we normally roll 
our eyes and move on to the 
next issue, but he then ex- 
plained that he’d been present- 
ed an error page that included 
the system administrator’s 
user name and password. 

A few calls to the design 
and hosting agency confirmed 
that he did indeed have the 
correct password. Apparently, 
the agency had accidentally let 
some pages that had debug- 
ging enabled go live. They 
quickly fixed the problem and 
changed their passwords. But 
it isn’t good when the closest 
thing we have to intrusion de- 
tection is relying on Web site 
users to call us when we acci- 
dentally provide them with 
administrative credentials. 

Of course, the Web site ad- 
ministrators shouldn’t be 
using an administrator ac- 
count to access the database, 
and they shouldn’t have hard- 
coded user name and password 
details in the pages. We'll have 
to kick off a proper review of 
the whole setup because they 
obviously aren’t doing a good 
enough job on their own. 

I'd like to think that our in- 
house servers will be more se- 
cure than theirs when we in- 
stall IIS, but I have a feeling 
that we may face a similar 
learning curve. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Vince Tuesday,” whose 
name and employer have been disguised 
for obvious reasons. Contact him at vince. 
tuesday@hushmail.com, or join the dis- 
cussion in our forum: 
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To find a complete archive of our 
Security Manager's Journals, go online to 


@ computerworld.com/secjournal 
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SECURITY LOG 
Security Bookshelf 


® Managing Information 
Security Risks: The OCTAVE 
Approach, by Christopher J. 
Alberts and Audrey J. Dorofee; 
Addison Wesley Professional, 


tices. It's a dry read, but the 
method it details is powerful. 
This book can take chief secu- 
rity officers from best efforts to 
a professional, repeatable 
process. If you're aspiring to 
take the information security 
helm, the book’s business- 
focused approach can guide 
you on the road from techie to 
chief security officer. 

- Vince Tuesday 


Sony Fingerprint 
Scanner 

Anew fingerprint reader from 
Sony Electronics Inc. in Park 
Ridge, N.J., can store, match 
and export fingerprint images. 
The FIU-600 is a slimmed- 
down version of the company’s 
Windows-compatible FIU-710 
and sells for about $135. The 
600 is capable of storing and 
matching 1,000 fingerprints 
locally. it contains more ad- 
vanced matching technology 
than the 710 but doesn't in- 
clude the 710’s cryptographic 
processor. 





Number 19 


VeriSign processes over 
$3.7 billion in payment transactions 


per quarter. 


It may also be news to you that VeriSign handles e-commerce payments for some 80,000 different businesses and protects more than 
400,000 websites. You see, VeriSign has spent the last seven years building a secure infrastructure for the Internet. Wed like to do the same 


for your business. VeriSign can help you deploy a trusted infrastructure so you can conduct secure communications and transactions. Sc 


no matter how many e-commerce payments your company handles, you'll know every last one of them is secure. 
° : °c: , . . 2 aN? 
Learn all you need to know about infrastructure security — and how VeriSign’s managed network and security solutions aise 
. ° ° ° ° . 8 ee . © 
can help you - by downloading our new white paper: Cyber Security in the Age of Action. Visit www.verisign.com/ security The Value of Trust 
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IBM Readies New 
WebSphere Edition 


IBM has announced WebSphere- 
Express, a new edition of its Web- | 
Sphere software aimed at compa- 
nies with 100 to 1,000 employ- | 
ees. WebSphere Application 
Server-Express, due on Dec. 13, 

is priced at $25 per intranet user 

or $2,000 per processor. Web- 
Sphere Portal Server-Express is 
currently available at $77 per in- 
tranet user or $30,000 per 
processor. WebSphere Business 
Connection-Express is available 

at $5,000 per processor. 


Qualstar Ships 
New Tape Library 


Qualstar Corp. announced last 
week that it’s shipping a new 
rack-mounted, 5U-high automat- 
ed tape library that holds up to 36 
Linear-Tape Open tape cartridges 
for a total storage capacity of 
7TB. (One U equals 1.75 in.) Simi 
Valley, Calif.-based Qualstar said 
its new RLS-8236 tape library 
features 2G bit/sec. Fibre Chan- 
nel interfaces, data transfer rates 
of up to 432GB/hour and brows- 
er-based remote management 
software. Pricing for the RLS- 
8236 starts at $18,000. 


Ximian Launches 
Groupware Suite 


For Linux, Unix 
Ximian Inc. has released Version 
1.2 of its Ximian Evolution group- 
ware suite. The Boston-based 
company has also introduced the 
optional Ximian Connector for 
Microsoft Exchange 2000, which 
enables Linux users of Ximian 
Evolution to function as Exchange | 
clients. | 
Evolution Version 1.2 includes | 
upgrades to its integrated e-mail, | 
calendar, contact and task list | 
management functions for Linux | 
and Unix users. Evolution can be | 
downloaded free at www.ximian. | 
com. The standard edition costs 
$29.95, and the professional edi- | 
tion costs $59.95. Connector for 
Microsoft Exchange can be pur- 
chased for $69. 
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Bum 


the technology actually 
working in business. That’s 
partially because in the 
world of technology, hype 
outstrips performance al- 
most every time. But often, 
more constructive forces 
are at work that must play 
themselves out as well. 

Take Web services. You 
can read about them almost 
every week in the IT trade 
press and, with remarkable 
frequency, in the general 
business press. What you 
can’t read about very often are actual 
implementations in companies that 
trust Web services for key functions. 
The reason is simple: There aren’t 
many such deployments. 

It’s clear that for vendors, Web ser- 
vices are a done deal. The heavy- 
weights — companies such as Micro- 
soft, IBM, BEA — are up to their usual 
schizophrenic antics, muscling one an- 
other out of the way when they can, 
forming partnerships to tackle com- 
mon problems when they can’t. 
They’re currently joining together to 
promote the development of urgently 
needed standards to bolster the securi- 
ty and reliability of Web services. And 
like tick birds on the backs of rhinos, 
the smaller vendors keep up their side 
of the relationship by generating Web 
services applications as they ride on 
the momentum of the big boys. 

But somehow, the corporate users 
out there haven’t gotten the message 
that Web services are inevitable and 
indispensible. Those attending a re- 
cent Gartner conference in Chicago 
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Road for 
Web Services 


NYONE WHO PAYS ATTENTION to cor- 
porate IT knows that there’s a long, wind- 
ing road between the first claims that a 
technology will transform the way busi- 
ness works and the point at which we see 


were no more than tepid 
about bringing Web ser- 
vices into their shops, es- 
pecially for the purpose of 
enterprise application inte- 
gration (EAI). Isn’t EAI 
supposed to be the sweet 
spot for Web services, the 
way the technology will 
prove itself once and for all 
and earn the confidence of 
Fortune 1,000 users? 
Maybe, but those IT 
managers in Chicago told 
Computerworld that they 
weren't about to take chances on Web 


| services for mission-critical integra- 


tions, especially those that require 
high security or are transaction-inten- 


| sive. “The standards aren’t there yet,” 


was the flat assessment of a senior 
technical designer at U.S. Steel. 


He was specifically referring to Web | 


services security, but he might have 


| been talking about almost any aspect 


of the technology. And the problem is 
more complex than the admittedly dif- 
ficult task of building confidence in 
the corporate IT community. Web ser- 
vices remain lost in a fog of confusion 


| about what they really are. 


Last September at the XML Web 


| Services One Conference in Boston, a 


presenter got a laugh with the line, 


| “Ask five people to define Web ser- 


vices, and you'll get six definitions.” It 


| was refreshing to find a speaker at an 

| industry event acknowledging that the 
| experts are sometimes as befuddled as 
| corporate IT is about the exact nature 


of Web services. 
At that conference, Computerworld 





reporter Carol Sliwa followed up by 
asking five high-ranking computer sci- 
entists from companies such as IBM, 
Software AG and a respected Gartner 
analyst to define Web services. The re- 
sult was — you guessed it — six differ- 
ent definitions. Sure, there was over- 
lap, but there was also enough incon- 
sistency to suggest that there’s an un- 
settlingly elusive quality to this latest 
set of transforming technologies. 
Which is why Web services technol- 
ogy desperately needs the sturdy 
framework of standards that appears 
to be several years away. The founda- 
tion of XML, SOAP, WSDL and UDDI 
are a start, and they’ve enabled plenty 


| of Web services applications to come 


to market. But the difficult process of 
trying to sell the technology has the 
beneficial effect of exposing what 
needs to be done. 

IBM, Microsoft and VeriSign are 
now pushing WS-Security and all its 
follow-on specifications (see page 25), 
which will define security and privacy 


| policy implementation and trust rela- 


tionships. BEA and Microsoft are be- 
hind the creation of Business Process 
Execution Language for Web Services, 
a potentially significant step toward 
making Web services ready for prime 
time. 

Which gets us back to that long road 
between initial hype and widespread 
acceptance into business. We’ve been 
hearing so much about Web services 
for so long, it’s hard to remember that 
the technology is just developing. The 
path into corporate IT shops will be 
paved by technical refinements and 
conform to a map provided by mature 
standards. But the journey will take a 
while. Web services are going to be the 
next big thing for a long time. D 


WANT OUR OPINION? 


For more columns and links to our archives, go to: 
www.computerworld.com/opinions 
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Do Ask, Do Tell Job Hunting 101: QUOTE OF THE WEEK 


Ever wonder what black IT man- Attitude Is verything We haven’t done empirical studies, 
agers are thinking? Maybe you Amid layoffs, company buyouts, and but in personal observations, | have 





should. The work environment 
that black IT workers experi- § 
ence may not be the same 

one their white colleagues 

take for granted. Page 44 


GIVEN THE SPUTTERING ECONOMY 
and continuous budget-cutting, many 
IT workers are finding comfort in the 
basics right now. Like simply having 

a job. 

A majority of the 1,416 IT workers 
and managers who participated in 
Computerworld’s 2002 Job Satisfac- 
tion Survey said they’re gen- 
erally happy with their com- 
pensation, job duties, rela- 
tionships with their bosses 
and understanding of where 
their companies are headed. 

But while they’re grateful 
to be employed, the majority 
also said they long for many 
of the benefits that evaporated with 
the dot-com boom, namely a wider 
set of career options, higher pay and 
more training opportunities. They 
also want better communication with 
their bosses about their careers. In- 
deed, a solid 69% of the respondents 


“SATISFACTION 
SURVEY 
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mergers and acquisitions, finding a new 
and rewarding IT job opportunity isn’t 
easy these days. But it’s also not impos- 
sible, writes columnist Betty Jo Sims. 


Page 46 


indicated that they aren’t working to 
their full potential. And only 24% said 
they’re satisfied with their opportuni- 
ties for advancement, while a whop- 
ping 54% said they’re dissatisfied. 

“I don’t think there’s a lot of [job] 
satisfaction, but [rather] a willingness 
to shut up and put up given the short- 
age of opportunities out 
there,” says Maria Schafer, 
an analyst at Meta Group 
Inc. in Stamford, Conn. 

Because of the staff re- 
ductions and massive bud- 
get cuts many IT organiza- 
tions have endured in the 
past year, CIOs “are trying 
to maintain service levels with fewer 
people than they had last year,” says 
Schafer. “And on the other side, you’ve 
got a workforce that’s really overbur- 
dened in terms of what they’re being 
asked to do.” 

In fact, 56% of the respondents said 


They’re picking up the slack from their laid-off 
colleagues, seeing fewer career opportunities and 


their companies have laid off workers 
in their IT departments in the past 12 
months, and 58% indicated that their 
companies’ IT budgets have been cut 
in that same time frame. 


Learning to Cope 
Some workers, such as American Fi- 
delity Assurance Co.’s Marshall Foo, 
have been able to put the additional 
workload in perspective. Foo, a former 
Marine who is a network systems ana- 
lyst at the Oklahoma City-based insur- 
ance company, says he learned in the 
Marine Corps that “you take whatever 
you're given to get the job done.” 
Although two new positions were 
created this year, the IT department 


seen a lot more diversity in IT at the midlevel 
through director level, though not at the top.” 


- Keith A. Caver, co-author of Leading in 
Black and White: Working Across the 
Racial Divide in Corporate America 


at American Fidelity has also taken 
on more projects, says Foo. The new 
work includes migrating the compa- 
ny’s mainframe-based e-mail system 
to a LAN environment, moving from 
Windows NT to Windows 2000 and 
integrating the company’s desktop 
systems and Novell network platform. 

Overall, Foo says he likes the peo- 
ple he works with, is happy with his 
benefits and compensation, and is 
challenged by his job every day. “I’m 
43, and this is absolutely the best job 
I’ve ever had,” he says. 

Others agree that IT is the place to 
be. An overwhelming 89% of survey 
respondents said they’re satisfied with 
their decision to pursue a career in IT, 


getting less training than ever before. But despite the 
negatives, most of the 1,400-plus IT workers who 
took our survey said they’re happy with their jobs — and 
simply glad to be working. 


GRIN 
BEAR IT 


pee ke AR Ureur aaee 
learned in the Marine Corps to “take whatever 
you're given to get the job done” - a require- 
ment for many-in today’s tight economy. 
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and only 8% indicated that they would 
consider moving to a position outside 
the IT industry. Nineteen percent said 
they’re actively looking for another job. 


Doing Double Duty 

As rampant cost-cutting has led to 
smaller staffs, increased workloads and 
fewer bonuses and raises, the remain- 
ing IT workers are being pushed hard. 
Earlier this year at PacifiCorp, an ener- 
gy services provider in Portland, Ore., 
“there were a couple of projects going 
on where I was stretched to my limit,” 
says Cathy Taddei, an IBM DB2 sys- 
tems software specialist. Fortunately 
for Taddei, the company decided to 


drop a DB2 data-sharing project, which | 
| knowledges that he’s “lucky 

| to have a job right now,” and 

| he praises his company for 

| its flexible work schedules and 


lessened her workload. 

Taddei describes herself as very sat- 
isfied in her job. But Steve Kerns, se- 
nior IT technical analyst at Cargill Inc., 
says his level of satisfaction depends 


on the day. That’s partly because Kerns | 


has received just one 3% raise in the 
past three years, despite having picked 
up responsibility for coordinating end 
users for a Web e-mail effort after the 
project manager was dismissed in July. 
Although he isn’t actively pursuing 
another position, Kerns says he keeps 
an eye on the job boards. The problem 
is, there are “pretty slim pickings, and 
the jobs that are out there are being 
offered at lower salaries,” he says. 


How stressful is your job? 


Somewhat 
stressful 


| and starts, 48% of the re- 


| fied with their job security. 
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Lack of training was another com- 
plaint of many survey respondents. 
Forty-five percent said they’re dissatis- 


fied with the amount of training they’re | 


offered. Kerns says Minneapolis-based 
Cargill cut back on technical training 
when money got tight. But now that 
business is on the uptick for the man- 
ufacturing firm, the largest privately 
held company in the U.S., funds are 
starting to free up, he says. 

Although the overall economy has 
shown improvements in fits 


spondents said they’re satis- 


Alan Sukert, a software 
engineer at Xerox Corp., ac- 


telecommuting policies. His main 
bone of contention is that the office 
products maker “doesn’t do a very 


| good job of defining career paths for 


their engineers.” 
Sukert, who has worked in software 


| quality assurance at Xerox’s office sys- 
| tems group in Fairport, N-Y., for more 


than seven years, complains that soft- 
ware engineers who remain in the 


| same pay group for a while aren’t en- 
| couraged by managers to take steps to 


get promoted. “So if the employee 


How satisfied are you with your 
decision to pursue a career in IT? 


Do you believe that you're work- 
ing to your fullest potential? 


JOB 
SURVEY 2002 


| doesn’t initiate [steps to receive a pro- 
motion], it doesn’t happen, and the 
employee gets frustrated,” he says. 

On the whole, survey respondents 
said they’re very satisfied with their re- 
lationships with their managers. Fifty- 
nine percent of the respondents indicat- 
ed that they’re satisfied with their rela- 
tionships with their supervisors, while 
22% expressed some level of dissatisfac- 
tion. Half the respondents also said 
they’re satisfied with their supervisors’ 
management capabilities, 
with 36% indicating some 
degree of dissatisfaction. 

Career development 
seems to be the one area 
where managers fall down. 
Forty-seven percent of sur- 
vey respondents indicated 
that they’re dissatisfied 
with their supervisors’ active involve- 
ment in their career development, 
| while 33% said they’re satisfied. 


| Enjoying the Work 

Despite pockets of dissatisfaction, 

| most IT workers interviewed seem 
happy with their jobs and employers. 
For instance, Cliff Hill, an IT portfolio 
manager at Detroit-based Ford Flight 
| Systems, an aircraft manufacturing di- 





satisfied with his job. That’s partly be- 
cause professional development is em- 


Has your company laid off work- 
ers in the IT department in the 
past 12 months? 


If so, did your company handle 
the layoffs with tact and respect 
for the affected employees? 


30% 30% 


1 Lee 


vision of Ford Motor Co., says he’s very | 
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phasized at Ford, and employees are 
encouraged to take courses and ex- 
pand their abilities, says Hill. 

He recently took project manage- 


| ment certification courses at Ford’s re- 


quest and in the past has beefed up his 
managerial skills by taking classes in 
areas such as conflict management and 
running effective meetings. 

Julie Waddle, an IT specialist at IBM 
in Raleigh, N.C., says she enjoys the di- 
verse challenges of helping her compa- 
ny determine customer ownership and 
financial responsibilities for machines 
that have been sold or leased. “It’s been 
one challenge after another, a lot of de- 
tective work, and I like that,” she says. 

And when times get tough and the 
grass seems greener elsewhere, IT pro- 
fessionals like Foo remember that 
working with good people is an impor- 
tant benefit that can’t be overvalued. 

“There’s a little bit of tension here 
and there, but not the backbiting and 


| politicking that you have in bigger 


companies,” says Foo. “A lot of the peo- 
ple here are just good-natured, down- 
to-earth folks who genuinely care 


| about you.” D 





HIGHER PAY, HAPPIER PEOPLE? 


For job satisfaction ratings, categorized by respondents’ 
compensation level and age, visit our Web site: 


QuickLink a2730 
www.computerworld.com 


METHODOLOGY 


IN AUGUST 2002, for one week Com- 
puterworld invited visitors on its Web 
site to take the Job Satisfaction Survey. 
The 1,416 people who participated had 
titles ranging from CIO to help desk op- 
erator and represented a wide range of 
industries and company sizes. 
The gender, company type, compensa- 
tion and age of respondents can be 
broken out as follows: 
GENDER: 82% men; 18% women 
COMPANY TYPE: 53% IT user organi- 
zations; 30% technology vendor com- 
panies; 10% consulting firms; and 2% 
IT contractors (5% didn’t specify com- 
pany type) 
COMPENSATION: 29% indicated that 
their salaries before bonuses and bene- 
fits are between $56,000 and $75,000; 
25%, between $30,000 and $55,000; 
14%, more than $100,000; and 5%, 
less than $30,000 
AGE: 2% age 18-24; 27% age 25-34; 
33% age 35-44; 26% age 45-54; 119% 
age 55-64; 1% age 65 or older 

- Mari Keefe, research manager 
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JOB § SATISFACTION SURVEY 2002 


1. Overall satisfaction with your job 


VERY SOMEWHAT 
SATISFIED SATISFIED 


NEITHER SATISFIED §=— SOMEWHAT . 
NOR DISS SATISFIED DISSATIS FIED DISSATISFIED 


Pa ena sen company 29% 32% 15% 29% 10% 





itech (vendor) ‘company _‘ 18% _ 29% 14% 24% 15% 
nsultants 18% 29% 12% 26% 15% _ 
19% 29% 15% 24% — | 13% 3 


35%  —«*13% == 21% 





Female 19% 


a ciey 


OMEWHAT NEITHER SATISFIED —SOMEWHA tr 
TISFIED NOR DISSATISFIED DISSATISF ieD DISSATISFIED 


38% 





ano, 
35% 





28% 
35% ‘15% 10%: 
40% ae 10% ; ___ 20% 





Me ile 17% 


Fema _ 20% 10% % 


Female 


3. Benefits. 


SOMEWHAT NEITHER SATISFIED = SOP NAT 
SATISFIED NOR DISSATISFIED DISS iFIED DISS SATISFIED 


37% 13% 15% 9% 


SAT ts IED 


No yntec ‘hnology (us ser) comps any 26 %o_ 





"37% ‘18% 12% 10% 
27% 18% 19% 18% 
36% 15% «7% 12S 
35% 12% 14% 


High tech (vendor) company 19% 
Consultants 18% 


Male Sh fi 20% zr 


F Female _ 31° %o 








A. indinin onl amount of bonuss 


VERY SOMEWHAT NEITHER SATISFIED §= SOMEWHAT 
SATISFIED — SATIS\ reo. NOR DISSATISFIED = DISS 


Nor tec! echnology (us ser) Cc ‘) company 9% 19% 19% 


h eee. 8% 16% 18% 21% 
24% 21% 








6% 12% 





37% 


5. 5. Connection okie pay and performance 


NEITHER SATISFIED SOMEWHAT 
WOR DISSATISFIED DISSATISFIED 


VERY SOMEWHAT 
SATISFIED SATISFIED 


20% 23% 24% 
High-t ‘tech (vendor) company 9% 22% 18% 
Consultants _ . a 8% _ 18% 
Male 8% ==. 20% 


Nontechnology ( user) company. 9% 





Female NM] % 
6. Security ant sieieldeiion of 401k)/stock een ten 


VERY SOMEWHAT NEITHER SATISFIED SOMEWHAT VERY 
SATISFIED _ SATISFIED WOR DISSATISFIED DISSATISFIED DISSATIS SFIED 


Nontechnology (user) company _ 18% 29% 13% 
High-tech (ven (vendor) company 16% 


6% 26% ~ 14% 





15% 24% 
26% 


Consultants _ 


Male 7 co re 17% 


Female 


7. Workload 





VERY SOMEWHAT NEITHER SATISFIED SOMEWHAT VERY 


SATISFIED — SATISFIED 


Nontechnology ( (user) ‘company 15% 18% 22% 11% 


High-tech (vendor) company _ 15% _ 23% 
Consultants ee) 31% 


Male 14% 
Female 2 16% 


NOR DISSATISFIED DISSATISFIED DISSATISFIED 


22% 10% 


8. Flexibility of work hours 


VERY 


SATISFIED 


SOMEWHAT 
SATISFIED 


NEITHER SATISFIED }§==SOMEWHAT 
NOR DISSATISFIED DISSATISFIED DISSATISFI 





( ompany A3% 


29% 





1-tech (vendor) company 6% 


Consultants 45% 


770 


26% 





43% 


29% 





52% _ 


9. Telecoms options 


25% 


SFIED 
26% 18% 


19% 





25% 14% 





18% 


17% 20% ~— ‘18% fee 


aa 





h 
\ 
Fe 23% 


16% 23% 4% aoa 





10. ). Physical work environment 
saris FED 


SOMEWHAT NEITHER SATISFIED §=© SOMEWHAT \ 
SATISFIED WOR DISS SATISFIED oIss. ATISFIED DISSATISFIED 





inoiogy ( (user) ) ) company 24 % 


15% 18% 8% 





gh- tech (ve ndor) company 30% 


17% 15% 





24% 


22% 20% 





25% 
32 ” %o 


11. Ciena for vubieemiais 


VERY 


SATISFIED 


18% 17% “she 8 


10% 18% 


SOMEWHAT NEITHER SATISFIED = SOMEWHAT 
SATISFIED NOR DISSATISFIED DISSATISFIED 





an 


16% 23% 21% 





13% 21% 26% 31% 





( consultants 


18% 19% 26% 28% 





Male i. ; 8% 


Female 7 10% 


15% 
19% 





12. Sbeuaaiie 


VERY 
SATISFIED 


SOMEWIIAT NEITHER SATISFIED SOMEWHAT 
_ SATISFIED _WOR DISS SATISFIED DISSATISFIED Ors 





tec hnology (t us r) company _ 28% 
High-tech (vendor) company _ 13% 


28% x 14% 15% 


20% © 23% 





sultants, ce 42% 


Mae NM 


Fe smale __ ae 


13. Ability to hfieme decisions 
SATISFIED 


technology (user) company _ 7% a 
High-tech (vendor) company _ 15% 
Male , __ 7% 
Female 17% 


Consultants _ 17% 


26% 
26% 


32% _ 
that dat you 


SOMEWHAT NEITHER SATISFIED SOMEWHAT VERY 
SATISFIED NOR DISSATISFIED DISSATISFIED DISSATISFIED 


36% _ 15% 20% 12% 
35% 15% 20% 15% 


34% «16% = 21% 12% 


35% 15% 
37% 11% 


14. Ability to influence ameren company success 


VERY 


SATISFIED 


Nontechnoogy -—_ company 1% 
_ 12% 
Constants ae 12% 


Male r _— . 1% 


Female 12% 


NEITHER SATISFIED SOMEWHAT VERY 
NOR DISSATISFIED DISSATISFIED DISSATISFIED 


30% 26% 20% 13%. 
27% 21% 21% 19% 
27% 23% 22% 16% 
28% 24% 
31% 24% 


SOMEWHAT 
_SATISFIED 
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15. Opportunity to use new technologies 


VERV SOMEWHAT 
‘SATISFIED SATISFIED 


No echnology (user) ) company | ny 21% 


NEITHER SATISFIED SOMEWHAT VERY 


934% 16% =~———:19% 10% 


NOR DISSATISFIED DISSATISFIED DISSATISFIED 





H ih- tech (vendor) company 
= 4 


_ 22% — 34% 12% 22% 10% 
ies ga oe 36% 14% 18% 18% 
Male a a a 20% 

19% 36% 14% 20% 


16. Cupntenly to vale on interesting projects 


VERY SOMEWHAT = NEITHER SATISFIED 
SATISFIED SATISFIED 


on sultants 


Female 


1% 


SOMEWHAT VERY 


Nontec shnology ( (user) company 24% 
Hight ech (vendor) company _ 21% 
18% 


Consultants 


13% 11% 
13% 
18% 


18% 
20% 
21% 


34% 
31% 


“it z 28% 15% 


Male 22% —«SI% 14% 19% 14% 


Female _ 21% 37% 14% 17% ‘11% 





17. Access to company-sponsored training and seminars 


VERY SOMEWHAT EITHER SATISFIED SOMEWHAT VERY 
SATISFIED WOR DISSATISFIED DISSATISFIED DISSATISFIED 


(user) company 18% 22% 18% 
endor) company _ 12% 24% 15% 
7% 20% 21% 

21% 18% 
28% 14% 


SATISFIED 

Nontechno 

High- tech ( 
Consultants aca 

Male — 

een 20% 





Female 


18. Ccmundeden with supervisor 


VERY SOMEWHAT 
SATISFIED SATISFIED 


27% 
28% 
33% 
ee 
31% 


NEITHER SATISFIED SOMEWHAT VERY 
WOR DISSATISFIED DISSATISFIED DISSATISFIED 


18% 14% _ 
20% 14% _ 
21% 8% 
20% 

13% 49 


Nontect inology (user) company 30% _ 
Hi gh-tech (vendor) company 28% 
Consultants : 21% 
Mae 28% 


Female 33% 


19. Secesiiion received from supervisor 


VERY SOMEWHAT 
SATISFIED SATISFIED 


SOMEWHAT VERY 
FIED DISSATISFIED 


NEITHER SATISFIED 
WOR DISSATISFIED DISSATIS: 


16% 20% 

14% 22% 

__ 23% 20% 
16% 
12% 


Nontechnology (user) company 24% 24% 
High-tech (vendor) company 21% _ 28% 
Consultants * 18% 22% 
Male 22% 25% 
Female 26% 28% 





18% 
20. Supervisor’s management capabilities 


VERY SOMEWHAT NEITHER SATISFIED 
__ SATISFIED SATISFIED WOR DISSATIS! FIED 


28% ‘11% 
“16% 
21% 


14% 


SOMEWHAT VERY 
DISSATISFIED DISSATISFIED 


21% 


Nontechnology (user) company 22% 
High-tech (vendor) company _ 22% 28% 
Consultants 18% 27% 
Male 21% 28% 


Female 25% 30% 


21. Supervisor's wie involvement in your career cotenaies 


VERY SOMEWHAT NEITHER SATISFIED SOMEWHAT VERY 
SATISFIED SATISFIED WOR DISSATISFIED DISSATISFIED DISSATISFIED 


19% 21% 20% 25% 
19% 21% 19%. 29% 
15% 20% 28% 23% 
18% 21% | 

24% 18% (99 





Nontechnology (user) company 15% 
High-tech (vendor) company 12% 
Consultants 14% 
Male 14% 
Female 16% _ 








11% 


NOR DISSATISFIED DISSATISFIED DISSATISFIED 


15% 


22. Overall relationship with your supervisor 


VERY SOMEWHAT NEITHER SATISFIED 
SATISFIED SATISFIED NOR DISSATISFIED 


Nontechnology (user) company 33% 27% 17% 
High-tech (vendor) company 32% 26% 21% 
Consultants 2% «BAM 19% 
Male 31% 28% ~=—S=-—:19% 

a 34% 29% 16% 
23. Relationship with your IT peers 


VERY SOMEWHAT 
SATISFIED SATISFIED 


Nonte ce oo) come 34% 40% 
V 40% 38% 
36% 40% 

36% 39% 


39% 40% 


SOMEWHAT VERY 


12% 11% 
12% 9% 
18% 5% 


Female 


NEITHER SATISFIED 
NOR DISSATISFIED 


SOMEWHAT VERY 


14% ——B% ~——«A% 


18% 6% 0% 


24. Sane with end users 
VERY SOMEWHAT 
_ SATISFIED SATISFIED 
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High-tech (vendor) cor 37% 
36% 23% 8% _ 2% 


21% 6% 2 2% | % } 
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NEITHER SATISFIED SOMEWHAT VERY 
NOR DISSATISFIED DISSATIS SFIED DISSATISFIED 


17% 6% 1% __ 
23% % 7% 2% 


29% ae 
39% 36% 


25. eteting of the beiteaiie mission 


VERY SOMEWHAT NEITHER SATISFIED SOMEWHAT VERY 
SATISFIED NOR DISSATISFIED DISSATISFIED DISSATISFIED 


_SATISFIED 


16% 8% 5% 
26% 36% 16% 13% 9% 
31% on a 6% 
31% 

~ 38% 


26. dennis of the i issues o aflecting your company’s industry 
VERY SOMEWHAT NEITHER SATISFIED SOMEWHAT VERY 
SATISFIED SATISFIED NOR OISS SATISFIED DISSATISFIED DISSATISFIED 


30% 43% 6 3% 
29% 43% 4% 
31% 37% 23% 5% 4% 
29% 41% 19% 7% 4% 


31% 43% 16% = 7% =~ 3% 


27. Overall satisfaction with your company 


SOMEWHAT VERY 
DISSAT SFIED DISSATISFIED 


RA 12% 
, 25% 
23% 


VERY SOMEWHAT 
SATISFIED SATISFIED 


ny 16% 32% 16% 
16% 27% 12% 
15% 25% 

16% 29% 

15% 34% 


NEITHER SATISFIED 
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Do Ask, Do Tell 


Ever wonder what black IT managers 
are thinking? Maybe you should. 


The work environment black IT 


professionals experience may 
not be the same one their white 
colleagues take for granted. In 
November’s Harvard Business 
Review, Keith A. Caver and An- 
cella B. Livers describe the “mi- 
asma” of tension and 

distrust that can poison 

the work experience for 
people of color. Caver is 
director of client and as- 
sessment services at the 
Center for Creative 
Leadership in Greens- 

boro, N.C. He and Liv- 

ers co-wrote Leading in 

Black and White: 

Working Across the 

Racial Divide in Corporate 
America (Jossey-Bass, 2002). 
He spoke with Kathleen Mely- 
muka about what creates this 
toxic atmosphere and what 
white IT managers can do 
about it. 


Tell me about the special role white 
managers expect their black col- 
leagues to play. Sometimes 
blacks are seen as unofficial 
ambassadors. I don’t think it’s 
a role people are levying on 


African-American colleagues 
as a punishment or a burden; 
from their point of view, it 
may seem logical. But they’re 
expected to get a feel for the 
views, temperament and tem- 
po of all blacks and communi- 
cate that back. Also, 
in reverse, they’re ex- 
pected to take mes- 
sages from corporate 
back to these black 
coalitions that may or 
may not exist. They’re 
also expected to be 
unofficial mentors. 


What's wrong with all 

that? Nothing, if it’s 
applicable to everybody. But if 
it’s only done with blacks, do 
blacks have some special lan- 
guage that enables them to 
communicate in a way you 
can’t? Also, these roles come 
in addition to normal respon- 
sibilities, and they don’t get re- 
warded. You find yourself the 
unofficial diversity spokes- 
person, and it may be that role 
becomes pre-eminent, and not 
your other role, which may be 
your strong suit. Soon you’re 








sought out for that and not for 
your technical prowess, and 
there’s a diminishing focus on 
your real skills. Another issue 
is that often no one asks if you 
want these roles; they simply 
assume that you will and 
should do it. 


This must be particularly difficult in 
IT, where your skills are every- 
thing. Right. If you’re not get- 
ting rewarded for these other 
things and you're not recog- 
nized for your real skills, you 
may be seen as a great person, 
but you’re not seen as the fu- 
ture CIO. 


You say that white managers often 
set expectations for black employ- 
ees that are demeaning. Can you 
give me an example? One person 
said, “The reason I don’t hire 
many black people is if I have 
to fire them, they will sue me.” 
If blacks are expected to fail, if 
you're expecting that you’re 
going to fire them, if you’re 
looking at the downside as 
opposed to the opportunities 
that diversity and talented in- 
dividuals can bring, it does put 
us at a disadvantage. 


Does the miasma dissipate as 
more blacks enter a given work- 
force? Not necessarily. We 
have found that the miasma 
dissipates as individuals’ and 
organizations’ acceptance of 
difference increases. An in- 
creased number of minorities 
might be a reflection of in- 
creased acceptance of differ- 
ence, or it could be just a re- 
sponse to some regulatory re- 
quirement. In that case, you'll 
just have bigger pockets of 
people not interacting because 
it’s not a product of enhanced 
recognition, understanding 
and valuing of difference. 


The IT industry prides itself in be- 
ing a meritocracy. Do you find 
things are different culturally in 
IT? We haven't done empirical 
studies of different industries, 
but in personal observations, I 
have seen a lot more diversity 





in IT at the midlevel manager 
through director level, though 
not at the top. When you have 
a skills-based mind-set, skills 
may be the leading factor for 
initial advancement. But it de- 
pends on the organization. 
We’ve interviewed black peo- 
ple from IT that have shared 
the same concerns as their 
African-American colleagues 
in industries such as banking 
and medicine. 


How much of this do you think is 
about stereotyping and bias, and 
how much is about miscommuni- 
cation? It depends on the per- 
ception of the individual. 
Someone I know says, “We 
judge ourselves by our inten- 
tions; we judge others by their 
behavior.” Your intention may 
be well meaning, but your be- 
havior may reek of an “-ism” 
— racism, sexism — to me. 


So our experiences color our per- 
ceptions. Exactly. I talked to an 
IT manager who said, “I don’t 
know if my suggestions get 
the same weight as my white 
colleagues. I say something, 
then someone else says the 
same thing and it’s a great sug- 
gestion.” Well, there could be 
other reasons it was better re- 
ceived from the other person 
— maybe I didn’t frame it as 
well or deliver it as well — but 
left to my own designs, I could 
think it was because I’m black. 
Not every slight is intentional, 
but you draw your conclu- 
sions based on perceptions 
and experience. 


What is the cumulative effect of all 


this? There seems to be dimin- 
ished trust, because I’m not 
sure how much I can invest in 
this relationship with you if 
this is how you think about 
me. Second is increased stress. 
There is something wearying 
about having to be on guard 
all the time. 


As a white IT manager, how do | 
begin to see the miasma that has 
seeped into my department? 
Communication. And do some 
reflection about your own 
behaviors. Be open-minded. 
Educate yourself: Read, attend 
events, ask people. Find trust- 
ed agents. As you build a rela- 








FROM A BLACK BOSS 
We're going te 
have a more di- 
verse workplace, 

so we're going to have blacks 

working for whites, whites 
wotking for blacks, Hispanics 
working for whites. . . . In or- 
der to attract talent, you have 
to make sure that talent from 
every place wants to be in 
your organization. If for some 
reason some group of talent 
says that’s a bad place to be, 
then you lose. 
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AL ZOLLAR, GENERAL MANA- 
GER, LOTUS SOFTWARE GROUP 


tionship, start questioning and 
check your own perceptions 
and perspectives on things. 


How is that different from putting 
my trusted agent in the ambassa- 
dor role? Because you're asking 
questions about your behav- 
iors and comments, and you’re 
asking him as an individual, 
not [as] an ambassador. 


Give me some examples. If you’ve 
been asking blacks in the orga- 
nization to serve as unofficial 
mentors for other blacks, you 
might ask them how they feel 
about that. You might find they 
wonder why you never ask 
them to mentor a white person. 
You might say, “I’ve been read- 
ing things that suggest that 
people of color and women 
don’t often get offered direc- 
tor roles to the extent whites 
do. Do you think that happens 
in our organization?” Or, “We 
have been trying to create equal 
access. Have we been effective? 
Why or why not? How can we 
do better?” There are lots of 
ways you can ask individuals 
about their perceptions. DB 


Melymuka is a Computerworld 
contributing writer. Contact her 
at kmelymuka@earthlink.net. 


This is the latest in a series of monthly 

discussions with authors of articles in 

the Harvard Business Review on topics 
of interest to [T managers. 
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Top IT Spending 
Priorities for 2003 
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BASE: 846 CiOs and other IT buyers, 
representing $33 billion in spending. 
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Tough Times for 
IT Contractors 


Coming off one of their worst 
years in history, IT contracting 
businesses will see a revenue de- 
cline of 0.8% in 2002, according 
to Dataquest Inc. in San Jose. In- 
dustry revenues will total $20.7 
billion, down from $20.8 billion 
in 2001, it said. Next year looks a 
little better, with Dataquest pro- 
jecting a 3.3 % increase in rev- 
enues to $21.3 billion. 


California Home for 
High-Tech Workers 


With 1.54 million high-tech work- 
ers, California ranks No. 1in the 
nation for total employees in 
high-tech industries, according 
to the U.S. Bureau of Labor Sta- 
tistics. Bureau researchers define 
an industry as high tech if the 
percentage of its workforce in 
research and development and 
technology-oriented jobs is twice 
the average for all industries. The 
following round out the top 10: 
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PEER TO PEER * BETTY JO SIMS 


ob Hunting 101: 
Attitude Is Everything 


G6 


Finding the job opportu- 
nities in which we can learn 
and grow is becoming more 
difficult in these leaner 
times. I was laid off or 
downsized three times be- 
tween 1994 and 1999. Each 
time, I looked for a new job 
in my community so I didn’t 
have to uproot my family 
and move to another region 
of the country. Each time, I 
found employers who were 
looking for my level of ex- 
pertise and experience. 

Was it easy? Absolutely 
not! The beginning salary 
level in each new job was 
equal to or less than that of 
the previous job. But my 
hard work, enthusiasm for learning 
new systems and skills, and my flexi- 
bility to rise to the challenges of a new 
job enabled me to move into positions 
that brought pay increases and more 
responsibilities over time. 

IT professionals who remain rigid 
in their scope of work are being left 
on the curb. The future of technology 
is very bright with many opportuni- 
ties. But we must grow and expand 
our expertise. We cannot cling to our 
mainframe loyalties. 

Those who are positive about ac- 
cepting the challenges of working with 


HERE THE JOBS ARE... does 
one wait for me?” I borrowed — 
and tweaked — the line from 
an old Connie Francis song, yet 
it’s a familiar refrain in conver- 
sations among IT professionals today. Amid layoffs, 
downsizing, company buyouts, and mergers and acqui- 
sitions, what is there for us? How do we cope? What do 
we do? How do we compete? 


| work with my peers. 


| and we work hard to use one another’s 


| problem. My manager uses my exper- 





new ideas and with younger | 
people in the IT profession 
can find the opportunities 
very rewarding. I have been | 
a manager in past jobs, and 
I participate in the inter- 
viewing process in my cur- 
rent position. I see the faces 
that look defeated before 
we even begin to talk. I read | 
résumés that aren’t varied 
in experiences and see peo- 
ple who appear uninter- 
ested in new challenges 
and opportunities. 

As companies eliminate 
middle management posi- 
tions, we often face the un- 
easiness of going back into 
the technical team. I went 

back to a systems analyst role after be- 
ing a team leader and a department 
manager in previous jobs. I am certain 
that my positive attitude helps me a 
great deal in my daily interactions and 
Each of us brings different strengths, | 
strengths for the good of the team and 
the good of the projects. Our manager 
fosters cooperative work, with two 
people often working together on a 


tise and varied past experiences as 
part of his “sounding board” when we 





discuss various approaches to solving 
system problems. 
Many of us in the IT profession 


| today have, and want to have, very 


positive attitudes about ourselves, our 
abilities and our companies. We look 


| forward to being at work. We also ex- 


pect our employers to honor the fact 
that we have lives and families and 
commitments outside of the office. 


| Flexible schedules can enable us to 


have that life beyond the workplace. 

Finding that new job is possible. It 
takes planning and lots of effort. You 
begin with an evaluation of your skills 
— past and present. Look for those 
experiences you enjoyed most, as well 
as those projects that benefited your 
company most. 

Get help with your résumé from 
someone in the IT profession who 


| sees résumés as a part of his job. Talk 


with friends and others who have been 
in your shoes to work through the 
emotions surrounding letting go of 
the past and finding that positive atti- 


tude toward your next position. 


Look for companies that offer oppor- 
tunities to build on past skills and have 
the training opportunities to support 
personal skills growth. Sometimes 
you must take the job that gets offered 
because you have bills to pay, but you 
can continue to look for that ideal posi- 
tion that will offer the personal growth 
opportunity in the longer term. Jobs 
are out there — but you must look 
for them. 

Networking with peers is a great 
way to find an unusual opportunity or 
something a little different in its chal- 
lenges. That new job opportunity could 
be just the steppingstone you need to 
build your skills for a better future. D 
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MICROSOFT CERTIFIED 
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PricewaterhouseCoopers (PwC) 
is seeking an experienced 
Systems Integrator Manager 
(Security Identity Services) to 
lead technical aspects of 
implementation phases of secu- 
rity systems architecture 
Position requires a Bachelor's 
degree or equivalent educa 
tion/experience in CS, MIS or 
CE & 4 yrs related exp including 
exp in: web page design (HTML 
JSP, ASP), web server installa 
tion & configuration (Netscape 
tS, Apache), web resource 
security tools (SiteMinder 
getAccess ClearTrust 
SecureWay), LDAP, Oracle 
Java, J2EE, XML, SAML, SOAP 
UNIX/Solaris & NT. Job site 
location: Dallas, TX. Interested 
candidates please reference job 
code 4NWN6H & fax resume to 
Jennifer Green at 713-356 
4004. No phone calls please 
Employer will only consider 
applicants authorized to work for 
any employer in the U.S 


Director of Client Interactive 
Strategy needed wi/exp to 
analyze client needs & objec 
tives regarding interactive 
media & advise appropriate 
advertising programs 
Maintain client relationships 
Monitor returns on invest 
ments obtaired via data cap 
ture & analysis using DART 
(Double Click's Advertising 
serving & analyzing tool) Use 
Nielsen Netratings, Comscore 
& @plan. Send resumes to 
Tech Target, 117 Kendrick St 
Suite 800, Needham, MA 
02492 


Quality Assurance Engineer 


wanted to define and docu 
ment system test cases 
Must have a_ Bachelor's 
degree or foreign equivalent 
degree in Computer Science 
Engineering or a related field 
and a minimum of 3 years of 
experience in testing and 
development Experience 
must include Oracle Mail 
resumes to Recruiting 
Director @ Virgin Mobile 
USA, LLC, 10 Independence 
Bivd., Warren, NJ 07059 


Software Engineers & 
Programmers Design 
develop, test and imple- 
ment specialized ERP and 
CRM applications in JD 
Edwards One World and 
related tools, XML, C, RPG 
SQL Server, and DB2/400 
Prevailing wage/benefits 
Triton Infotech, Inc., Attn 
HR Silverside Carr 
Executive Center 501 
Silverside Road, Suite 139 
Wilmington, DE 19809. No 
Phone calls piease. EOE 


ulting ha 
r Englewood 
for a Senior Software C 
to engage in full life cycle soft 
ware development of 3-tier ERP 
and CRM software applications 
Job requires bachelor's degree 
software development experi 
ence and working knowledge of 
webMethods, Siebel and Oracle 
financial software applications 
Interested candidates should 
send resumes to John Padilla 
Compri Consulting, Lincoln 


St., #860, Denver, CO 80203 


Prog/Analysts to analyze 
design, appls using Java, J2EE 
JMS, JDBC, Serviets. 
ASP, SQL, Windows. 
OS; perform weblogic 
server admin; conduct user req 
and feasibility studies; perform 
unit/system testing of scientific 
sys/appls. Require: BS or for 
eign equiv. in CS/Engg (any 
branch) & 2 yrs exp in IT field 
S/W Engineers manage teams 
to analyze, design, develop 
appls on COBOL, C, C++, VB 
Oracle, SQL, EGRET, EPI-INFO 
etc on UNIX/Windows OS 
design, develop e-commerce 
appls using J2EE, Java, XML 
Serviets, EJB and JSP; evalu 
ate/guide team by providing 
methodologies; interact with 
clients. Require: MS 
CS/Engg. any branch) & 
exp or BS or foreign equiv 
any of above & 5 yrs of relevant 
progressive exp Travel 
volved. Competitive salary 
Resume to: HR Salem 
Associates, inc 5 6th Ave 
Ste 102, Des Moines, |A 50309 


Prog/Analysts to analyze 
design, implement s/w and 
security appls using C, C++ 
VC++, Java Script, Java 
Python, HTML, CGI, SQL, MS 
Access, etc. under Windows 
UNIX & Sun Solaris; test 
debug, document, maintain 
and support appis; Require 
B.S. or foreign equiv. in 
ngg. (any branch) & 2 
yrs of exp. High salary. travel 
involved Apply to HR 
CipherTrust Inc 11475 
Great Oaks Way, Ste 210 
Alpharetta, GA 30022 


S/W Engineers 
analyze, design 
based security appis 
VC++, Java Script 
Python, HTML, VB Scr 
TSQL MS Access. 
interdev, Active X, etc 
Windows, UNIX and NT/S 
E OS; conduct feasibilit 
req analysi 
members/end 

Requir 

salary 


HR 


Oaks Way 


GA 30022 


oftware 
Programmers 


Programmers: Design, develop 


test and implement specialized 
cturing 


warehousing, produc 


apps 
Industrial/Mé 
Distribut 


RPG/N& 


jot 
required revailing 
wage/benefits. To apply, send 
resume to HR, S3 Technologie: 
htree Industrial Bivd 
GA 30092. EOE 


yomfield 
software 
assurance 
tier applica 
interface with Ora 
Create, in 
refine autor 
4 test scrig 
Unix si SQL 
tools tc jage in Regression 
Black Box, and White Box test 
ing to assure quality oftware 
products Positio' requires 
Bachelor's degree and software 
testing experie as well as 
experience in specific skills 
related the fp 
resurr t vail to Amy Kr 


porate Expre 


dsitior Send 


Way, Broomfield 


Programmer Analyst: To work in 
various unanticipated locations 
throughout the U.S Duties 
Under direct supervision devel- 
op, test and document computer 
programs including LAN/WAN 
systems and network communi- 
cation programs. Evaluate user 
requests and software program 
requirements for new and modi- 
fied programs. Write specifica: 
tions, code, test and debug com. 
puter programs. Use of Cisco 
Works, Frame Relay, ISON 
DSL, Visio, TSO/IP, Novell 
NetWare and Windows NT. Req 
Bachelor's degree in Computer 
Science or Electronics 
Engineering, plus 1 year in the 
job offered or 1 year in a related 
occupation including Systems 
Analyst or Consultant 40 
Hrs/wk, 8AM-5PM, $54,000/yr 
Must have proof of legal author. 
ity to work in the United States 
Send your resume to lowa 
Workforce Center, 902 W 
Kimberly Road Suite 51 
Davenport, IA 51806-5783. 
Please refer to Job Order 
1A1101639 Employer paid 
advertisement 


Programmer Analyst sought 
by IT Co. in Lawrenceville 
NJ. Must have BS in Comp 
Engg & 3 yrs exp engaged 
in dsgn, dvipmt & imple- 
mentation of commercial 
applics using VB 6.0, SQL 
Server 7.0 & PL/SQL 
Developer 2000 & OLAP. 
Respond to: HR Dept. by 
fax (609) 912-0666 


Software 
design, develop & implement 


Developer to 
application software for 
data/document retrieval sys 
tems using Visual Basic 
COM COM+ & MTS 
Require: Bach. degree (or for- 
eign equiv.) in Comp. Sci 
Elec. Engg, or closely related 
field, w'3 yrs exp. in job 
offered or as a Software Engg 
or Sr. Prog/Anal.; 40 hrs wk 
8a-5p, M-F; Send resume to 
Corp. HR, Systemtec, Inc 

1200 Main St., Ste. 301 
Columbia, SC 29201 


Adept Computer is seeking IT 
professionals/engine fe 
Qualified applicants must have 
BS with minimum 1-yr exp. Skills 

Oracle, Jave, XML, J2EE 
sal JSP WebLogic 
WebSphere DB2 JDBC 
ClienvServer are plus. Apply at 
101 Harmon Bivd., Hoffman 
Estate, IL 60194. EOE 


consultants (Applications 
eloper, Programmer) want 
Yy Austin's consulting divi 
sion. Candidates shall use com 
puter skills in accounting, finan 
ial applications, A/R, A/P 
areas. Please send resumes to 
318 ow Roosevelt Road 
Lombard, IL 60148. EOE 


y9rmtek, Inc. seeks applicants 
Software Engineer position 


cation to develop, test and 


at its Walnut Creek, California 
loca’ 

support enterprise content man 
agement applications utilizing 
Oracle database technology 
Unix and Microsoft operating 
systems, programming with soft 
ware development languages 
including C++ and JAVA; Tasks 
include development of clier 
server and web-based applica- 
tions for content management 
Require BS 
Science an ninimum of two 


omputer 


years directly related exper 
ence. Resume to: HR, 17 
Oakland Bivd, Suite 30 

reek, CA 94596 
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SOFTWARE ENGINEER 
AS/400: Programmer-Need an 
AS/400: Programmer Analyst 
with BS degree in Engineering 
wimin 5 yrs IT exp. Applicant 
should be currently working with 
COBOL, COBOLLE, RPG 
RPGLE, CL, CLLE, SQL/400 
QRY/400, Operation Navigator. 
Turnover, DDM and AFP 
Capable of developing connec 
tivity among AS/400, MS Access 
and Excel apps and ability to 
write SQL functions and proce: 
dures. Catalog retailing busi- 
ness and Advanced Function 
Presentation (printing tool) exp 
is a must. System programming 
exp is also req'd. Please send 
res (w/salary reqs): Human 
Resources-!IT, Popular Club, 22 
Lincoin Pl, Garfield, NJ 07026 
EOE 


SOFTWARE ENGINEERS. 
Siemens Medical Systems has 
openings for Software 
Engineers for job locations in 
Malvern, Pennsylvania, or else 
where, with at least two years of 
experience as a Software 
Consultant or Programmer 
Analyst. Job Duties: Research 
analyze, design, develop, test 
and implement software applica: 
tions using Visual Basic, IIS 
ASP WebLogic TCP/IP 
UDP/IP, J2EE, Cobol, and DB2 
Positions require a Masters 
degree or the equivalent in edu- 
cation and experience 
Excellent Pay and Benefits 
Mail resume to: Patricia March 
Siemens Medical Systems, 51 
Valley Stream Parkway 
Malvern, PA 19355. 


SOFTWARE DEVELOPER 
(NYC) - Develop & deliver real- 
time interactive, transactional 
and analytic solutions over the 
Web, wireless & WAN net 
works: Design, program & doc- 
ument financial algorithms in 
VC++, Oracle, SQL-Server 
MFC, Active X, ATL & Com for 
Windows NT as_ required 
Develop new software prod- 
ucts. 2 yrs exp. req. / M.S. Deg 
in Comp/Sci and or 
Engineering. Send resume 
The Beast Financial Services 
404 Fifth Avenue,4th Floor NY 
NY 10018 


Insite Object, Inc. seeks PROD. 
UCT MANAGER (USER SUP. 
PORT ANALYST SUPERVI 
SOR) to supervise, coordinate 
and direct the activities of work 
ers who provide high-level tech- 
nical support to the Company's 
staff and clients. BA/BS in 
Electronics Comp. Eng 
required and 4 yrs exp in job 
offered or 4 yrs exp in consulting 
& developing training/documen 
tation solutions and SAP config- 
uration end resumes to 
Human Resources at 10777 
Westheimer Suite 925 
Houston, TX 77042 


Prog/Analysts to analyze 
develop appls on 
Windows, Solaris, AIX, UNIX 
using Java, Serviets, Java 
Beans, XML JDBC XSI 
HTML, VB, PL/SQL with Oracle 
MS Access, SAP R/3, ABAP/4 
perform requirement analysis 
feasibility study, documentation 
provide implementation and 
maintenance. Require: B.S. or 
foreign equiv. in CS/Engg(any 
branch) & 2 yrs exp in IT. Travel 
volved ympetitive salary 
Apply to: HR, Opalsoft, Inc 
3150 Almaden Expwy, Ste 205 


San Jose, CA 95118 





RUNS YOUR BUSINESS. 
AND ITSELF. 


(server 


| Awinning team: High tech and low stress. Introducing the IBM @server iSeries"890. 32-way processor, twice 
| the memory and |/O! That's mainframe power. Dynamic logical partitioning, self-optimizing disk management 
and single-network sign-on. That's low-stress simplicity. So, like the entire iSeries line, the i890 couples high 
performance with ease. For a paper on how i890 can deliver mainframe power and simplicity to your business, go 


i ie) c ur standar 1 = . . = 
to ibm.com/eserver/i890. Raise your standards. Not your blood pressure (© business is the : Flay twin 


n are trademarks or registered trademarks of Inter 


BM Corporation. All rights reserved 





WomeEN IN TECHNOLOGY INTERNATIONAL 


in business & technology: 


If you dream big, 
you need to network big. 


pin WITI 


WOoMEN IN TECHNOLOGY INTERNATIONAL 


As a woman in business, technology or the professions, you deserve a network as big as 
your aspirations — whether your career is in full stride or transition. 


Your GLOBAL NETWORK 


WITI is the only international organization dedicated to advancing women through technology 


WITI's growing membership, including media and corporate partners, provides access to more than 1 million 
women throughout the world... smart women who understand that WITI offers the opportunity to advance 
their expertise while building their personal/professional networks 


SuPPORT, ENABLE, MENTOR, LEAD 
These are WITI's core values. They add up to this: women using, 
understanding and mastering technology to empower themselves 


and each other — in every business and profession Join Now! 
s 


Exciusive WITT Memser BENEFITS Take advantage of our special year-end discount 
w Network with successful women in business and 


: on WITI’s Annual Membership. 
the professions around the world 


Visit witi.com or call 800-334-9484. 
Benefit from career and professional development services, 


technology information and products 
Participate in chapter meetings, conferences and events 


Expand your network online at witi.com — WITI's members-only listserv gives you fast answers 
from smart women 


Find career opportunities and post your resumé online at WITI4Hire 


Highlight your talents and accomplishments for colleagues, companies and career-builders 


icici 
PSSOCIATION 


Advancing Women Through Technology 





OT icone 


Sr. Software Engineer. Duties 
Resp. for rewrite of large fin 
appls. Perform appl. design 
using UML & appli. Develop 
using COOL:Plex Patterns 
library & OBASE. Direct coding 
base classes & appl.-level func- 
tions. Support the Java server 
implementing inci. writing Java 
code & devising solutions to 
improve SQL _ performance 
Provide tech. advice, assist. & 
troubleshooting. Requires: B.S 
(or foreign equiv.) in Comp. Sci 
Eng. or related field & 4 yrs. exp 
in the job offered or 4 yrs. exp. 
as a Consultant, Software Eng 
Developer or Analyst/Prog 
Concurrent exp. must incl.: 2 
yrs. exp. performing appl 
design using UML & appl. devel. 
op. using COOL:Piex Patterns 
library & OBASE. EOE. 40 
hrs./wk.; 8:00 a.m. to 5:00 p.m. 
Send resume (no calls) to 
Sharon Penn, LBSS, Inc., 3550 
Engineering Dr., Suite 200 
Norcross, GA 30092 


Analyst Programmer needed 
Seeking qual. candidates pos 
sessing rel. work exp. 2 years of 
the req. rel. work exp. must 
include working w/ Visual Basic. 
Duties include: gathering & ana- 
lyzing requirements, design & 
construction of applications, & 
test planning and execution 
Work w/ 3 of the following: SQL 
Server, HTML, DHTML, COM 
DCOM, XML, & Java Script 
Must be willing to travel and 
relocate. Mail resumes and ref 
yerences to: Cal-Pak Systems 
Inc., 4900 Stoddard Rd., P.O 
Box 3776, Modesto, CA 95352 
ATTN: HR 


Senior Software Engineer 
needed. Seeking qual. candi- 
dates possessing MS/BS or 
equiv. and/or rel. work exp. for 
developing scaleable multi 
threaded software infrastruc 
ture for live-collaboration 
eLearning in Java and C++ 
Part of the req. rel. exp. must 
include 6 mos. working w. 
TCP/IP and HTTP. Mail res 
and ref. to Centra Software 
Inc 430 Bedford St 
Lexington, MA 02420, ATTN 
HR 


Software Engineer to research. 

design and develop computer 

software sys' S in cor ction 

with hardware product develop 

ment utilizing Java, EJB, JSP 

Serviets, Swing, XML, UML 
RMI, HTML, PL/SQL, SQL 
5, Java Script 1.2, ORACLE 

with Dreamweaver 

Epicentric, Hor 

Wintarscs 

UML Toad 

Masters Degree 


Engine 

Ser F 
Consulting, Inc 
Parkway uite 
GA 30092 


Technical ConsultantEngineer 


Working with 
ners. Perform 


id deploy billing s 
using MetraTech's 
and products. D 
ment, stage and 
configuration and integration to 
meet business requirement 
customer care, directory 
vices, account's receivable 
Requires a minimum of a bache 
lors degree in Computer 
Science/Engineering Send 
resumes to Attn: Pam Holscher 
HR, MetraTech, 330 Bear Hill 
Road, Waltham, MA 02116 


COMPUTER 


IT CAREERS 


PeopleSoft has opportunities for technical and 
marketing professionals in California (Pleasanton, 
San Mateo, Santa Clara, Encino, Irvine, and other 
locations), Bethesda, MD, Waltham, MA, Teaneck, 
NJ, Atlanta, GA, Dallas, TX, Miami, FL and various 
other locations within the U.S. for the following: 


Developers 
Consultants 
System Analysts 


Technical Support Analysts 


Project Managers 
Marketing Analysts 
Requirements: 


Multiple openings/various levels and types available 


Bachelor's degree in relevant field generally 


required. 


Additional years of experience, skills and/or education 
may be required depending on job level/type. 


For consideration, please send your resume to 
PeopleSoft, Attn: Human Resources Manager, 
2377 Gold Meadow Way, Suite 110, Gold 
River, CA 95670, fax: 916-631-1546. We support 
workforce diversity. Visit our website at: 


www.peoplesoft.com 


PeopleSoft 


A 33-year record of quality 
people like you. 

We know you're in demand. So 
demand the best environment 
for your growth: IT consulting 
with an international leader 
We're everywhere business and 
industry are, with offices across 
the country. So always 
got a new set of chai with 
total support. We're currently 
recruiting the following profes 
sionals: Programmers, Program 
mer/Analysts, Application Devel- 
opment Specialists, Database 
Analysts, Business Analysts. 
Computer Specialists, Opera 
tions Specialist Network 
Administrat Specialists 
Software Engineers 1d Lead 
Analyst/Progrz > Apply 
online at www.ajilor 


yal Opportunity Employer 


Ajilon 
www ajilon.com 


Software Engineer to design 

develop, t and document 

distributed, high-performance 
al-time applications 

using real-time CORBA r 

ware. Hands on experience in 

TAO (The ACE ORB) required 

Utilize C++, Java 2 

Oriented Design 

Work performed in 

QoS protocols like intserv and 

Diffserv. Masters Degree and 

one year experience. Send 

Resume to 2893 Planet Pro 

Inc. Attn: JP, Sunrise Bivd 

S 107, Rancho Cordova 


Please mail resume (no cal 
specifying job title with ad t 
P.Norwood, Lowe’s Companies 
1605 N. Curtis Bridge Rd 
Wilkesboro, NC 28656. Multiple 
positions Job locatior 
Wilkesboro, NC 
* MIS TRAINEE - Perform ba 
oper. associated w/ dvipmt of 
applic sftwr, systems sftwr, ntwrk 
mgmt ustomer support 
mgmt ac fF 
Requires: B.S 
Info Sys 
+ MIS ANALYST 
implem 
complex appli 
codes using 
JCL, & DB. 
Require: 
Comp. Sci 
far 

ncurrent exp 
COBOL 
* MIS ANALYST 
rovide ful ‘ 


SQL to support RDBMS 
mentations. Require: 
(or foreign equiv 


2 irrent Exe 

ing in NT env 

ing Sybas 

+ INDUSTRIAL ENG'R, FA‘ 

TY - Use CAD, Excel, Acce 
analyze ct material 

dling methods 

maps for impr 

warehouse efficiency; pro 
cost benefit analysis for 
eqpmt: dvipt ergonomic handling 
methods to reduce workplace 
hazards/injuries Jetermine 
break-even pt, economic life 
RO!, & present value of eqpmt 
purchases (project/capital justifi 
cation), maintain ADA & OSHA 
reqmts. Requires: Bach.'s, ind 
Eng’r or closely reitd field 


Powerful Minds Attract 


Looking for a career on the cutting edge of technology? This is the place. People here love 
their work because they get to think big and dream big. Combine your proven skills with 
our resources - and really take off. Microsoft and Microsoft Business Solutions have the 
following opportunities available: 


Austin, Texas 
Applications Development Consultants, Software Engineers, Artists, Animators 


Berkeley Heights, New Jersey 
Consultants, Financial Analysts 


California 
(Silicon Valiey, San Francisco, Mountain View, Los Angeles and other locations) 


Software Engineers, Program Managers, Product Support Engineers, Product Managers, 
Consultants 


Charlotte, NC 
Software Engineers, Developer Support Engineers, Support Engineers, Applications 
Development Consultants 


Christiana, Delaware 
Consultants, Software Engineers 


Dallas, Texas 

Software Engineers, Developer Support Engineers, Support Engineers/Support 
Professionals, Applications Development Consultants, Artists/Animators, Consultants 
Technical Leads, Escalation Engineers, Platform Support Engineers 


Denver, CO [FRx] 
Software Engineers and Development Managers 


Findlay, OH 
Software Engineers, Product Support Engineers 


Fargo, ND 


Software Engineers, Product Managers, Technical Support Engineers, Technical Trainers 


New York, New York 
Developer Evangelists, Technical Account Managers, Consultants, Managing Consultant 
Business Controller 


Pittsburgh, Pennsylvania 
Consultants, Financial Analysts 


Redmond, Washington 

Software Engineers, Program Managers, Product Managers, Analysts, Financial Analysts, 
Research Analysts, Business Analysts, Business Development Managers, Computational 
Linguists, Database Administrators, Electrical Engineers, Linguistic Test Engineers 
Software Localization Engineers, Terminologists, Marketing Managers, Network 
Engineers, Product Designers, Reliability and Hardware Test Engineers, Support 
Engineers, Support Analysts, Support Professionals, Systems Analysts, Consultants. 
Systems Engineers, Technical Writers and Editors, Training Specialists, Usability Engineers 


Reno, Nevada 
Program Managers, Support Analysts 


Salt Lake City, Utah 


Developer Evangelists, Software Design Engineers, Software Ar 


Southfield, Mi 
Scientific Technician/Technologists, Man 


Waltham, MA 
Technology Specialists, Technical Product Specialists 


Washington D.C. 


Technology Specialists, Consultants, Business Analysts 


All positions offer competitive salary and excellent benefits, including bonuses and stock 
options. E-mail your resurne in ASCII text format to: jobs@microsoft.com (indicate Jot 
Code A22dn-1125 in the subject header). Or mail your resume to: Microsoft Corporatior 

Attn: Recruiting Department, Job Code: A22dn-1125, One Microsoft Way, Redmond, WA 
98052-8303. No phone calls please. We are an equal opportunity employer and 
support workforce diversity. Please visit our Web site for more information 


Micresott 


www.microsoft.com/careers 
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Despite Downturn, | 
CIOs Push Projects 


Promises of ROI 
help sell new tech 
investments 
BY THOMAS HOFFMAN 
LAS VEGAS 
HILE OTHER 
Comdex atten- 
dees were 
searching for 
new gadgets, a group of corpo- 
rate IT leaders were outlining 
steps they’re taking to deliver 
quantifiable business value on 
technology investments dur- 
ing the economic downturn. 
Although the companies de- 
ployed different technologies, 
they share one common ele- 
ment: They weren't afraid to 


Continued from page 1 


Comdex 


partment of Parks & Tourism, 
said he was disappointed. 
“What I was expecting to see 
— these big, major companies 
— just wasn’t there,” he said. 

James Grettum, a partner at 
Grettum and Co. in Fargo, S.D., 
said he has attended Comdex 
for at least 15 years, but he 
probably won’t come next year. 
“I thought last year’s show was 
really slow, and this year’s is a 
lot worse. This year, it just isn’t 
that exciting,” he said. 

But the show itself will be 
back here next year, according 
to Fredric Rosen, chairman of 
Key3Media. He said the goal is 
to sell all of his firm’s confer- 
ence brands, which include 
Comdex, NetWorld+Interop 
and Seybold, to “one strong 
buyer.” Companies in the trade 
show, publishing and financial 
industries are being viewed as 
potential buyers, he added. 

Steve Wilkinson, a financial 
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invest in IT projects that are 
expected to deliver solid re- 
turns on investment at a time 
when many IT managers are 
struggling just to maintain ser- 
vice levels for systems be- 
cause of flattened budgets. 

For example, Capital One Fi- 
nancial Corp. several months 
ago decided to replace the bulk 
of its HP/Oracle data ware- 
housing system with one based 
on NCR Corp.'s Teradata tech- 
nology. Gregor Bailar, CIO at 
the Falls Church, Va.-based 
credit card company, estimated 
that the investment will total 
“tens of millions of dollars.” 

But Bailar said the project is 
expected to deliver an ROI of 
| two to three times the cost. 


analyst at Standard & Poor’s, 
said he expects there will be in- 
terest, since Key3Media assets 
“are still pretty good.” He said 
the firm’s vulnerability stems 
from its debt, not the viability 
of its most popular shows. 
Wilkinson added that he 
would be surprised if Comdex 
didn’t continue to be a fairly 
large trade show. “It’s just a 
question of the size relative to 
what it used to be,” he said. 
Just days before Comdex 
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For one thing, the Teradata 
technology should significant- | 
ly cut the amount of time that 
executives have to wait for the 
results of analytical applica- 
tions run against data collect- 
ed from customers, he said. 

Susan J. Unger, CIO at 
DaimlerChrysler Corp. in 
Auburn Hills, Mich., said the 
automaker implemented an 
materials cost 
management system early last 
year. The application was 
aimed at helping Daimler- 
Chrysler’s 54 automotive com- 
ponent teams share ideas 
about increasing the use of 
common parts across its vehi- 
cle lines. 

Based on IBM’s Notes soft- 


opened last week, Key3Media 
announced a $315.7 million net 
loss for the third quarter and 
confirmed that besides the re- 
structuring and sell-off, it’s 
also considering filing for 
Chapter ll bankruptcy protec- 
tion, though Rosen said “no 
filing is anticipated shortly.” 
The technology sector’s 
downturn has kept Key3Media 
from making much progress in 
paying off the $400 million in 
debt it inherited when it spun 


| cles each week, she 


| The firm holds a long-term 
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ware, the system 
took less than a 
month to develop 
and cost less than $1 
million, Unger said. 
Component team 
members are now 


| using it to hatch an 
| average of 570 ideas 


for improving vehi- 


added, describing 
the project’s ROI as 
“unbelievable.” 

For example, the system has 
helped DaimlerChrysler cut 
the number of fog lamps used 
in various vehicles, saving $7 
million, Unger said. The soft- 
ware also helped the company 
winnow the number of seat 
structure components it uses, 
which should lead to $40 mil- 
lion in savings in the nexttwo | 
years, she said. 

Even smaller projects can 
pay off in big ways. Wyndham 
International Inc.’s rollout of a 
centralized call accounting 


| 
| 
| 
| 





off from Ziff Davis Inc. in Au- 
gust 2000, Rosen said. 
Key3Media’s sales force was 
aggressively working last 
week to sell space for next 
year’s show, which is slated to 
run for four days, Nov. 17-20, 
rather than the traditional five. 


| 


lease with the Las Vegas Con- 
vention and Visitors Authori- 
ty, Key3Media executives said. 
Rosen said his company will 
work with vendors that may 
be worried about committing 
to buy exhibit space at next 
year’s show because of Key3- 
Media’s unsettled status. He 
said he has told his staff to “be 
sensitive to the needs of 
clients,” including the normal 
deadlines for commitments. 
“Companies want to com- 
mit,” Rosen said. “They just 
want to make sure they’re 
committing to a stable entity.” 
Rosen said Comdex is a prof- 
itable show, despite this year’s 
declines in exhibitors and exhi- 
bition space. He said the firm’s 
current difficulties wouldn’t 
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system for its hotels 
last month is already 
contributing to cost 
savings, said Mark 
Hedley, chief tech- 
nology officer at the 
Dallas-based travel 
industry company. 
The call account- 
ing system serves 
several purposes, 
Hedley said. For 
starters, it helps 
front-desk clerks at each hotel 
identify loyalty program mem- 
bers who qualify for free tele- 
phone service. It also lets ho- 
tels keep track of individual 
customer charges for internal 
costing purposes, said Hedley. 
Wyndham also expects its 
investment to deliver IT-relat- 
ed benefits. Hedley said the 
$220,000 in software, hard- 
ware and deployment costs 
are expected to produce up to 


| . . 

| $60,000 in annual mainte- 

| nance savings for technology 
| that’s no longer needed. D 


| exist were it not for the debt 
| burden it has been carrying 


during tough economic times. 
In any event, several atten- 
dees and vendors said they 


still saw value this year, de- 


spite the scaled-down show. 
Frederick Badiali, a senior 
account executive at Westing- 
house Electric Co. in Mon- 
roeville, Pa., said attendees 
generally were more knowl- 
edgeable and serious about 
finding good business and 
technical products because of 
their limited budgets. He said 
the economy “weeded out a 
lot of people who were not in- 
terested in technology.” D 
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Big Show No More? 


S COMDEX REALLY A GONER? And will anyone really care 
when it’s gone? Last week, the IT industry’s Really Big Show 
wasn’t so big. There were half as many exhibitors as two years 
ago. Attendance was visibly down, even below last year’s di- 
minished post-Sept. 11 crowd. And Key3Media, which puts on 
the show, is considering bankruptcy protection. 
But the worst news for Comdex has to be the grumbling among 
many corporate IT people that the show just isn’t worth the trip. 
Funny thing, though — that’s what they were saying 15 years ago, 
when the National Computer Conference was the Big Show. 


Remember the NCC? You probably don’t un- 
less you’ve worked in IT for at least 20 years. 
But from the 1960s through the mid-1980s, the 
NCC was the IT world’s premier conference. 

Imagine the Comdex exhibition halls grafted 
onto a serious academic conference, complete | 
with technical papers on chip design, operating 
system structure and database organization. 
That was the NCC: big iron meets ivory tower, 
footnotes and all. 

Put on by a handful of technical societies 
and run largely on volunteer labor, the twice- 
yearly NCC peaked in 1983, when attendance 
hit 100,000. It was all downhill from there. Too 
big, impossible to navigate, not worth the trip, 
said attendees, claiming they wanted smaller, 
more focused shows and conferences. Vendors 
began to drop out. By 1986, NCC was shrinking 
fast. By 1987, it was a ghost town. 


Meanwhile, a little commercial show for re- 
sellers called the Computer Dealers Exposition 
— Comdex for short — was turning into the 
place to be for everyone in IT, especially if you 
wanted to see what was new with those little 
boxes called PCs. By the mid-’80s, it was big. 
By 1988, Comdex was the Big Show. 

So if Comdex really is on the way 
out, will something else replace it, 
the way Comdex itself replaced the 
NCC? Or is there really a need for 
a big IT show that smaller, more 
focused shows and conferences 
can’t fill? 

Sure there is. See, in the NCC 
days, corporate IT was about build- 
ing. In an IT world where you 
bought what you had to (hardware, 
mainly) and built the rest, it helped 
to go to a Big Show where you 
could see everything there was to 





buy — and also hear from experts how to build 
things like databases and operating systems. 

Since the rise of Comdex, IT has been much 
more about buying, dealing and partnering. 
PCs didn’t just teach us that small is beautiful. 
They also taught us the advantages of packaged 
software, hardware standardization and let-a- 
million-start-ups-bloom entrepreneurship. 
Comdex was about volume channels, vendor 
competition and venture capitalism. 

But like the NCC, Comdex was also about 
something else. Analyst Will Zachmann 
dubbed it “Camp Comdex,” a sort of techie re- 
union where corporate IT people came to rub 
elbows with vendor CEOs, Wall Street players, 
start-up wannabes and industry big names. 
Never mind that Comdex started as a show for 
dealers. It ended up as the Big Show for every- 
one in IT. 

We need that, no matter how much we com- 
plain about the size and cost and lack of focus. 
We've got to have a place where the whole IT 
world comes together. That’s why there will be 
a new Big Show. 

What will it be? Comdex could merge with 
the Consumer Electronics Show, 
further blurring the line between 
corporate IT and consumer tech- 
nology. Or the new Big Show might 
be the U.S. version of the huge Ger- 
man show CeBiT, which comes to 
New York next June — and may re- 
flect CeBiT’s heritage as a huge in- 
dustrial trade fair showing every- 
thing from telecom to tractors. 

Or maybe what replaces Com- 
dex hasn’t shown up yet. But when 
it does, we'll all go. Because Com- 
dex may be gone, but the Big Show 
must go on. DB 





But Not That Rugged 

This “ruggedized” laptop won't boot, so it ends up on 

service pilot fish's workbench. “When it arrived, we 

noted some crusty material on it.” fish says. Turns out 

it was stored in a locker in a ship's hold - and when 

the ship took on water, the laptop spent the night 

soaking in brine. Optimistic user asks, “Could you at 

least recover the data from the hard drive?” 

Eeeww! returns in a 

sticking on his Wa “Just like you 

new laptop, so IT showed me, | 

pilot fish sends it back to : took out the battery 

the vendor. That’s when : module and put the CD 

user admits the keys module in its place,” 

didn’t start out sticky. says airman. Sighs fish, 

“My cat vomited onthe : “So, since you took out 

keyboard, but | was | the battery, do you think 

afraid to tell you,” he ; it might need a power 

says. Says fish, “Itried cord now to work?” 

bed petony Sree my | Wouel You Bieliove 

had put my fingers to my : 

mouth after examining © A Window? 

the unit.” _ fell off my desk, user 
says. That’s how the 

Ka-Blam! | Seo Samer 

Someone broke into my ; main laptop unit ended 

car and shot my laptop, __up as three separate 

user tells tech support | sleone. EF pint Beh 

pilot fish. “Didn’t steal : grumbles, “We weren't 

the $3,000 piece of ? able to discern just how 

equipment,” says skepti-_ many hundreds of feet 

cal fish. “Rather, they : there had to be between 

shot t.” True, when the the desk and the floor.” 

laptop arrives at the : ; 

hardware repair shop, it | Of Course Not 

does have a bullet lodged | His laptop is freezing up 

in the screen. But fishis 

unconvinced: “We never 

got the user to admit he 

had anything to do with 

the assault.” 

Couldn't Hurt 

Air Force pilot fish's of- 

fice gives the base com- 

mander a weekly brief- 

ing on world events. It’s 

a young airman’s turn, 

and fish helps him burn 

the briefing to a CD. 

Now put it in a laptop sen 

and be readytogoin me — 


Two hours later, airman that atop? 
namic” 
sharky@computerworid.com. You snag a snazzy 
shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 





intel.com 


Did we break a barrier? 
Or did we break new ground? 


intel invests billions of dollars annually, resulting in remarkable technological achievements. 


Introducing the Intel’ Pentium’ 4 
Processor with HT Technology 
3.06 GHz. 


att 


Systems supporting HT Technology can This logo means your system 
process two streams is running on Intel’s most 
of information at the same time. powerful desktop processor. 


*Look for systems with the Intel Pentium 4 Processor with HT Technology logo which your system vendor has verified utilize Hyper-Threading Technology. 
Performance will vary on the specific hardware and software you use. See www.intel.com/info/hyperthreading for information 
©2002 Intel Corporation. intel and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. All rights reserved 





s the fastest database 
on IBM's fastest computer 
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When IBM wanted to show off 
their fastest computer, 

IBM chose Oracle. 

Again. 
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